Skip to content

Instantly share code, notes, and snippets.

@Sachinart
Last active May 15, 2023 07:10
Show Gist options
  • Save Sachinart/f8a646212f73d0a5597cdfbdcbef3158 to your computer and use it in GitHub Desktop.
Save Sachinart/f8a646212f73d0a5597cdfbdcbef3158 to your computer and use it in GitHub Desktop.
custom wordlist common.txt for bruteforce path or directory
/.env
/phpinfo.php
/info.php
/admin.php
/api/apidocs
/apidocs
/api
/api/v2
/api/v1
/api/v3
/v2
/.json
/.1.json
/content.xml
/content.1.xml
/siteadmin
/home.json
/home.1.json
/home.infinity.json
/home.xml
/home.1.xml
/home.feed.xml
/libs.json
/libs.1.json
/libs.infinity.json
/libs.xml
/libs.1.xml
/libs.feed.xml
/var.json
/var.1.json
/var.infinity.json
/var.xml
/var.1.xml
/var.feed.xml
/var/classes.json
/var/classes.1.json
/bin/querybuilder.json/a.css
/bin/querybuilder.json/a.html
/bin/querybuilder.json/a.ico
/bin/querybuilder.json/a.png
/bin/querybuilder.json;%0aa.css
/bin/querybuilder.json/a.1.json
/system/sling/loginstatus.json
///bin///querybuilder.json;%0aa.css
///bin///querybuilder.json.servlet;%0aa.css
///bin///querybuilder.json/a.1.json
///bin///querybuilder.json.servlet/a.1.json
/.children.json?FNZ.css
/+CSCOE+/session_password.html
/vpn
/bin/querybuilder.json.;%0aa.css?path=/home&p.hits=full&p.limit=-1
/moodle.zip
/wp
/wordpress
/blog
/register
/signup
/create
/Register
/sign-up
/Register.aspx
/Login.aspx
/login
/cpanel
/administrator
/admin
/v1
/package.json
/security.txt
/application.wadl
/api/apidocs
/swagger
/swagger-ui
/swagger-ui.html
/swagger/swagger-ui.html
/api/swagger-ui.html
/v1.x/swagger-ui.html
/swagger/index.html
/databases
/wp-admin
/wp-login.php
/users/1
/api/v3/users/1
/api/v3/accounts/1
/api/v3/account/1
/api/v1/account/1
/api/v1/accounts/2
/api/v2/accounts/2
/api/v2/users/2
/graphql
/jkstatus
/graphiql
/.git/config
/.mysql_history
/wstat
/server-status
/env.js
/env.json
/.json
/config/env.js
/config/app.js
/app.js
/api.js
/secure/QueryComponent!Default.jspa
/api/v1/users/2
/app/launcher/home
/js/config.js
/js/credentials.js
/js/secrets.js
/js/keys.js
/js/password.js
/js/api_keys.js
/js/auth_tokens.js
/js/access_tokens.js
/js/sessions.js
/js/authorization.js
/js/env.js
/portal
/portal/env.js
/portal/app.js
/app/app.js
/backup.bak
/backup.zip
/js/encryption.js
/js/certificates.js
/js/ssl_keys.js
/js/passphrases.js
/js/policies.js
/js/permissions.js
/js/privileges.js
/js/hashes.js
/js/salts.js
/js/nonces.js
/js/signatures.js
/js/digests.js
/js/tokens.js
/js/cookies.js
/cgi-bin/printenv.pl
/index.php.bak
/database.php.bak
/.git
/Register.aspx
/Signup.aspx
/AdminLogin
/Admin.aspx
/admin.php
/controlpanel
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment