Skip to content

Instantly share code, notes, and snippets.

Show Gist options
  • Save Sachinart/f8f22e70217bec1b03b385245a1e30a7 to your computer and use it in GitHub Desktop.
Save Sachinart/f8f22e70217bec1b03b385245a1e30a7 to your computer and use it in GitHub Desktop.
custom directory list to bruteforce all subdomains
/index.php.bak
/backup.bak
/index.aspx.bak
/Index.aspx.bak
/Download.aspx.bak
/search.php.bak
/wordpress-db.php.bak
/db.php.bak
/phpinfo.php
/info.php
/admin.php
/api/apidocs
/apidocs
/api
/api/v2
/api/v1
/api/v3
/v2
/.json
/.1.json
/content.xml
/content.1.xml
/siteadmin
/home.json
/home.1.json
/home.infinity.json
/home.xml
/home.1.xml
/home.feed.xml
/libs.json
/libs.1.json
/libs.infinity.json
/libs.xml
/libs.1.xml
/libs.feed.xml
/var.json
/var.1.json
/var.infinity.json
/var.xml
/var.1.xml
/var.feed.xml
/var/classes.json
/var/classes.1.json
/bin/querybuilder.json/a.css
/bin/querybuilder.json/a.html
/bin/querybuilder.json/a.ico
/bin/querybuilder.json/a.png
/bin/querybuilder.json;%0aa.css
/bin/querybuilder.json/a.1.json
/system/sling/loginstatus.json
///bin///querybuilder.json;%0aa.css
///bin///querybuilder.json.servlet;%0aa.css
///bin///querybuilder.json/a.1.json
///bin///querybuilder.json.servlet/a.1.json
/.children.json?FNZ.css
/+CSCOE+/session_password.html
/vpn
/bin/querybuilder.json.;%0aa.css?path=/home&p.hits=full&p.limit=-1
/moodle.zip
/wp
/wordpress
/blog
/register
/signup
/create
/Register
/sign-up
/Register.aspx
/Login.aspx
/login
/cpanel
/administrator
/admin
/v1
/package.json
/security.txt
/application.wadl
/api/apidocs
/swagger
/swagger-ui
/swagger-ui.html
/swagger/swagger-ui.html
/api/swagger-ui.html
/v1.x/swagger-ui.html
/swagger/index.html
/databases
/wp-admin
/wp-login.php
/users/1
/api/v3/users/1
/api/v3/accounts/1
/api/v3/account/1
/api/v1/account/1
/api/v1/accounts/2
/api/v2/accounts/2
/api/v2/users/2
/graphql
/jkstatus
/graphiql
/.git/config
/.mysql_history
/wstat
/server-status
/env.js
/env.json
/.json
/config/env.js
/config/app.js
/app.js
/api.js
/secure/QueryComponent!Default.jspa
/api/v1/users/2
/app/launcher/home
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment