Skip to content

Instantly share code, notes, and snippets.

@atucom
Last active March 3, 2022 14:00
Show Gist options
  • Save atucom/4bb8a86b9b671b35318ddd6cf40ac445 to your computer and use it in GitHub Desktop.
Save atucom/4bb8a86b9b671b35318ddd6cf40ac445 to your computer and use it in GitHub Desktop.
Place to store a directory enumeration wordlist, hand curated, no BS.
wls-wsat/CoordinatorPortType
_async/AsyncResponseService
oaiusydf8as7df68sdfyas8dgq
zxcv1987lla/av9s8dvj2-we_q
bea_wls_internal/
dana-na/../dana/html5acc/guacamole/../../../../../../etc/hosts?/dana/html5acc/guacamole/
vsphere-client/
Telerik.Web.Ui.WebResource.axd?type=rau
console/css/%252e%252e%252fconsole.portal
%252e%252e%252fconsole.portal
%2e%2e%2fconsole.portal
ui/
mob/
apiexplorer/index.html
folder
index.html
index.asp
index.php
index.jsp
index.action
struts3-showcase/
/owa/
/ews/
/ecp/
/oab/
/autodiscover/
/Microsoft-Server-ActiveSync/
/rpc/
/powershell/
/behavior
/behaviors
/configuration
/service
/serviceBehaviors
/services
/system.serviceModel
@atucom
Copy link
Author

atucom commented Apr 19, 2021

added these fro ms exchange single factor auth detection:
/owa/
/ews/
/ecp/
/oab/
/autodiscover/
/Microsoft-Server-ActiveSync/
/rpc/
/powershell/

@atucom
Copy link
Author

atucom commented Mar 3, 2022

Added Windows Component Foundation services that have the following URL endpoints:
/behavior
/behaviors
/configuration
/service
/serviceBehaviors
/services
/system.serviceModel

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment