-
Notifications
You must be signed in to change notification settings - Fork 4
/
directories.jbrofuzz
58688 lines (58686 loc) · 534 KB
/
directories.jbrofuzz
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
685
686
687
688
689
690
691
692
693
694
695
696
697
698
699
700
701
702
703
704
705
706
707
708
709
710
711
712
713
714
715
716
717
718
719
720
721
722
723
724
725
726
727
728
729
730
731
732
733
734
735
736
737
738
739
740
741
742
743
744
745
746
747
748
749
750
751
752
753
754
755
756
757
758
759
760
761
762
763
764
765
766
767
768
769
770
771
772
773
774
775
776
777
778
779
780
781
782
783
784
785
786
787
788
789
790
791
792
793
794
795
796
797
798
799
800
801
802
803
804
805
806
807
808
809
810
811
812
813
814
815
816
817
818
819
820
821
822
823
824
825
826
827
828
829
830
831
832
833
834
835
836
837
838
839
840
841
842
843
844
845
846
847
848
849
850
851
852
853
854
855
856
857
858
859
860
861
862
863
864
865
866
867
868
869
870
871
872
873
874
875
876
877
878
879
880
881
882
883
884
885
886
887
888
889
890
891
892
893
894
895
896
897
898
899
900
901
902
903
904
905
906
907
908
909
910
911
912
913
914
915
916
917
918
919
920
921
922
923
924
925
926
927
928
929
930
931
932
933
934
935
936
937
938
939
940
941
942
943
944
945
946
947
948
949
950
951
952
953
954
955
956
957
958
959
960
961
962
963
964
965
966
967
968
969
970
971
972
973
974
975
976
977
978
979
980
981
982
983
984
985
986
987
988
989
990
991
992
993
994
995
996
997
998
999
1000
# JBroFuzz Directory Enumeration Definitions for version 0.5
#
# -----------------------------------------------------------------------------
# Pre conditions
# -----------------------------------------------------------------------------
#
# Maximum number of lines 50000
# Maximum line length 256
#
# -----------------------------------------------------------------------------
# A bit of (directory enumeration) theory
# -----------------------------------------------------------------------------
#
# Web server directory enumeration represents the process by which a low
# skilled attacker can identify existing directories present on the server.
#
# JBroFuzz achieves this by checking for the existence of the following
# directories.
#
# Any line in this file is regarded as a comment if it begins with a '#' (yes,
# you can brake JBroFuzz if you fuzz this file!)
#
# Special characters will be encoded by JBroFuzz. As an example, a line entry
# of 'li ve' will become 'li%20ve'
#
# Special thanks go to james (at) uncon sittinglittleduck com
# Continue to look for directories out there!
#
# Copyright (C) 2007 subere (at) uncon org
# Version 0.5
#
!
!!
"
"verdach
$
%
&
'
(
)
*
+
+-
,
-
->
.
.,m
.,mn
.,mnb
...
.svn
/.,
/.,m
/.,mn
/.,mnb
/dev/nul
/dev/null
/etc/pas
/etc/passwd
/usr/gro
/usr/group
'
-
-1
-2
-buy
-d
-download
-NET
-p2
-setup
!
!dl
!ut
"
")
$
$1
$2
$2006
$Body
$e1_gif
$FILE
$File
$file
$searchForm
$VisitURL
(EmptyReference!)
(none)
(PPC-PDA) Glyph
)
*
**http:
**http://www
*checkout*
*docroot*
*http:
??
\
\'
\"
\"\
\"\"
\"backend
\"images
\\www
\images
_
_111
_2006
_211
_305
_310
_32803
_34
_347
_360
_463
_792
_98
_a
_A5dzqHS7Ppw
_about
_ads
_archives
_assets
_base
_bgtopgrad
_blank
_borders
_brands
_c
_clear
_ClkXB6AwBIs
_com
_comm
_common
_components
_d
_default
_derived
_disc1
_disc2
_dl
_download
_email
_en
_faq
_files
_folder
_g
_gfx
_go
_h
_home
_homepage
_html
_i
_images
_img
_imgs
_inc
_include
_index
_internal
_INTL
_kbas
_layouts
_logo
_m
_media
_n
_news
_Op9EQo7XmFQ
_page
_pdf
_photos
_pics
_private
_production
_pUqwWkModdg
_qTDAEasFLtU
_r
_reklama
_reqdis
_resources
_S
_s
_services
_shared
_site
_spacer
_static
_subscribe
_t
_teaser
_templates
_theme
_themes
_tools
_topline
_TVfEjAyW4Fk
_upload
_user
_W0QQfromZR12
_Warezrecon
_WypXYYwa4-s
_x9cLGls3yCY
_XKMdLGTzvfc
_y0Uo4FaZBAk
_yahoo
_ZDjFSQtk0gk
_zEd-8UfDFRU
~3
~cbedon
~chris
~cook
~dugsong
~esr
~greg
~hchen
~iramani
~jeff
~linda
~masmith
~mike
~provos
~r
~rachna
~ts
~wu
0
0-1
0-10000000
0-3
0-362
0-4
0-68
0-9
0-91
0-92
0-93
0_0
0_4
0_str
0_str1
00
000
0000
00000
000000
00000000
00000001
00000002
00000003
00000005
-exploits
01
01topics
02-week
02_chardev
-advisories
_000detail
03-week
03_procfs
_bkt
_thumb
08away
0b
0d
0day
0day_tracker
0e
0f
0pop_v2
0PR_
0s
0S
0stars
0TO_
0x333
0z
1
1-
1-0
1-1
1-2
1-3
1-4
1-5
1-6
1-admin
100best
100guarWebtechgeek
100x100
100X22
1111
-fsecure
1151502_img
116-convergence
116-roadcharging
116-screens
cisco
12042006
12048
120499
secpractice1
9997
99976
9998
9999
999999
999999R1K3-News
99aug
99b166acD
99tr028
9a
9b
9box
9c
9d
9e
9f
9i_checklist
9iAS_faq1
9ir2_checklist
9iR2hisec
9ir2secwp
9rules
9S
9s
9series
9th
9x
9x_c1sco
A
a
A-40_v1
A-book_v3
a-fy90
a-humor
a-index
a-l
a-z
a_01
a_03
a_07
a_09
a_1
a_10
a_11
a_12
a_13
a_14
a_15
a_17
a_18
a_2
a_3
a_5
a_6
a_7
a_8
a_9
a_Collage202
a_header
a_ind
a_Rectangle
a_rotate
a_z
A0
a0
a00
a001
a003cont
a01
a0250c0dD
A03
A04
A05
a1
A1
a10
A10
a11
A12
a12
a13
A13
a130X60w
a14
a15
A15
A15S7KD6JKK9RZ
A15XTHGM4VS4WH
A16
a16
a17
A17
a18
A18
a19
A1Monitor_v5
A1TWC9DJG1W90S
a2
A2
A20
a20
A21
a21
A22
a22
a23
a24
a25
a26
a27
a28
A28
A29
A2HVNCYQ2D1PCJ
a2icon
a2k
a2ps
A2R6BG6JF9ESJF
a2z
A3
a3
a30
A30
a31
A31
A32
a32
a33
a34
a37
A38
a38
a39
A39XU2AC18DUF6
a3a8
A3H0OGNDRS94MK
A4
a4
a40
a41
a43
a46
a47
a48
a49
a4proxy
A5
a5
a50
A50
a51
A52
A55
A57
A58
a6
a60
a60_copyright
a60_privacy
a7
A7
a76
A8
a8
a83-answers1
a83-answers2
a83-sourcecode1
a83-sourcecode2
a83-tutorial1
a9
A9
a95-answers1
a95-answers2
a95-sourcecode1
a95-sourcecode2
a95-tutorial1
AA
aa
AAA
aaa
AAAAAAAAAA8
AAAAAAAAAAk
AAAAAAAAAAM
AAAAAAAAAAs
AAAAAAAAAAw
AAAAAAAAAAY
AAAAAAAAAB4
AAAAAAAAABs
AAAAAAAAACQ
AAAAAAAAADA
AAAAAAAAAHw
aaai98
aaas
aab
aabbs
AAC
aac
aad
aaf
aai
aalogo
aanbiedingen
aanbod
aanmelden
aao
aap
aapl
aar
aardvark
aaron
aaron_margosis
aarp
AARP
aarticles
aas
aasm
aasniff
aaw
aawlan
ab
AB
ab2
ABA
aba
abacus
Abakt
abandoned
abandonware
abarcarSQL
abb
ABB
abba
ABBA
ABBA - 15 albums
abbacus_layout
abbacus_logo
abbey
abbrev
ABBYY
abc
ABC
abc2
abcnews
abcs
abduction
abe
ABeginnersGuideToWirelessSecurity
abercrombie
aberdeen
abfab
abg
abi
abilene
abit
abittraversed
abiword
ablbull1
able
AbleFtp
ableton
ablrule
abm
abn
abnf
abo
abonament
abonnement
aboot
aboOverview
abortion
ABOUT
about
About
about-author
about-contact
about-engadget
about-hsw
about-me
about-off
about-sponsors
about-techcrunch
about-ucl
about-us
About-Us
about-website
About Blender
About Us
about_01
about_acm
about_admin
about_author
about_awards
about_bizjournals
about_calendar
about_careers
about_contact
about_de
about_doubleclick
about_e
about_en
about_f1
about_fr
about_gartner
about_header
about_history
about_index
about_jobs
about_lavasoft
about_logo
about_main
about_me
about_mini
About_Nero
about_netiq
about_np1
about_np2
about_off
about_on
about_osdl
about_overview
about_panda
about_pic
about_privacy
about_sf
about_site
about_snort
about_truste
about_up
about_us
About_us
About_Us
about1
about2
about3
aboutadobe
AboutAMD
aboutbutton
aboutcnet
aboutCompOff
ABoutComputerCrime
aboutdns
aboutdod
aboutebay
aboutEditOff
aboutemb
abouteuropa
aboutExecOff
aboutiwsl
aboutjohn
AboutMe
aboutMe
aboutme
aboutmsr
aboutnokia
AboutNorm
aboutOf
aboutoff
aboutpair_off
aboutpg2
aboutrss
aboutSearch
aboutsf
aboutsite
aboutsun
aboutthissite
abouttitle
abouttn
AboutTrialSubscription
aboutuk
Aboutus
AboutUs
aboutUs
aboutus
aboutus_off
aboutus1
abp_favs
abp_home
abp_page
abr
abrash
abroad
abruzzo
abs
ABS
abs-guide
absetup
absinthe
absolute
Absolute
absolute-poker
absolutelinux
Absolutestartup
abstract
Abstract
abstracts
Abstracts
abstrbu1
abstrrul
absurd
abt
abtaC8257
ABTL
abu
abu_ghraib
abus
abuse
Abuse
abusers
abyse
AC
ac
AC2
ac2
ac30
ac4p
aca
acad
academe
academia
Academia
Academic
academic
academic-departments
academic_calendar
Academic_Information
academic_programs
academicprograms
academics
Academics
academy
acap
acapulco
acartpro
acatalog
acb
acc
ACC
acc_pic
acc_tour
accel
accelerate
accelerated
acceleration
accelerator
accent
accenture
accept
acceptable_use
accepted
acces
acceso
Access
access
access-control
Access-Control
access_control
Access_Providers
access1
accesscontrol
accesshks
Accessibility
accessibility
accessibility-info
Accessibility_Training
accessible
accesskey
accesskeys
accessoires
Accessories
accessories
accessory
accessunit
accessunit_one
accessunit_three
accessunit_two
accident
accidents
accipiter
accolades
accom
accomm
Accommodation
accommodation
accommodation_uk
accommodations
accomodation
accomplish
accomplishments
accord
Account
account
account-details
account-login
account-new_user
account-signup
account_edit
account_login
Account_Management
accountability
accountancy
accountancyage
accountant
accounting
Accounting
accounting-finance
accounting_software
Accounting1
AccountingMyAccount
Accounts
accounts
Accounts_Payable
accountteam
accountz
accreditation
accreditations
acct
acct_login
Acct_Main
acct_mgmt
accu_logo
Accueil
accueil
accuracy
accutane
accwhizz
acd
acdc
ACDSee
acdsee
ace
ACE
acee
aceh
acer
Acer
acercade
aces
achat
achievements
achilles
achive
achtung
aci
acid
acid2
aciphex
ack
ackerman
ackertodo
acknowledgements
acks
acl
acl_users
aclocal
ACLReporter
aclu
ACLU
aclu_dividerline
acm
acm_outguess
acme
Acme
acml
acmlogo
acmorg
acn
acne
acord
acorn
acos
acoustic
acp
acpr
acquisition
Acquisition
acquisitions
acquisti
acro
Acrobat
acrobat
acrobat_logo
acrobat7
acrobatconnect
acrobatreader
acrobot
Acronis
acronis
acronym
acronyms
acros
across
acs
acsac
acsc
acsfaq
act
ACT
Act
act-13
acties
acting
Action
action
Action-Adventure
action-games
action-items
action_center
Action1
actionalerts
actionfigures
actions
actionscript
ActionServlet
actionshotfpad
ActionView
activ
activate
activation
activcard
Active
active
active_shield
ActiveCD
activecontent
activedirectory
ActiveDirectorydatabasefileNTDS
ActiveDVD
activegrid
actively
activembuttoncap
activemq-management
activeperl
ActivePerl
ActivePerl-5
ActivePerlEnterpriseEdition
ActivePerlProStudio
ActivePython
ActivePythonEnterpriseEdition
ActiveRecord
activeRenderer
actives
activescan
activeshield70x70
ActiveSpeed
activestate
activestate_logo
ActiveTcl
ActiveTclEnterpriseEdition
ActiveTclProStudio
activex
ActiveX
Activism
activism
activist
activiteiten
activites
activities
Activities
activities-interests
activity
activity_holidays
activitymail
ActivityServlet
ACTMap
actnow
actor
Actors
actors
actpr
actress
actresses
Acts
acts
acts1998
acts2000
actu
actual
actualidad
actualite
Actualite
actualites
actuate
actueel
acuerdos
Acunetix
acupuncture
acura
Acura
acxiom