Folder Name Description of Contents abnormal-http-traffic Abnormal HTTP traffic including SQL injection attacks abnormal-uri-rfc Abnormal URI's from RFC3986 Section 5.4.2 all-multiproxy-list anonymous and non-anonymous proxy list apache-pfs-crypto Apache Perfect Forward Secrecy Cryptography configuration statements https://blog.qualys.com/ssllabs/2013/08/05/configuring-apache-nginx-and-openssl-for-forward-secrecy anonymous-multiproxy-list anonymous proxy list content-policy-directives Content Security Policy directives from HTTP replies content-policy-directives Content Security Policy directives via CSP.com content-policy-headers Content Security Policy HTTP response headers via CSP.com content-policy-sources Content Security Policy sources via CSP.com csp-header-apache Content-Security-Policy HTTP response header Apache config csp-header-iis Content-Security-Policy HTTP response header IIS config csp-header-nginx Content-Security-Policy HTTP response header NGINX config danwin1210-onion-links https://danwin1210.me/onions.php?format=text dirsearch-words-list words parsed from the Go implementation of dirsearch tool's dict.txt file https://github.com/evilsocket/dirsearch/blob/master/dict.txt example-uri-refs Example URI's from the RFC3986 URI specification issues list mozilla-cacerts-list Info and PEM's on Certificate Authorities used by Mozilla ocsp-urls-list list of OCSP URL's onion-cab-list list of TOR sites that used to be hosted on onion.cab via https://web.archive.org/web/*/onion.cab/list.php onion-links-list List of .onion sites verified in 2017 left on pastebin.com proc-model-defs https://html.spec.whatwg.org/multipage/webappapis.html#definitions-2 rails-secret-tokens Ruby on Rails secret authorization token string values referrer-policy-directives Referrer Policy directives rfc1918-common-addrs RFC1918 based IPv4 private network address spaces for SSRF attacks snort-http-inspect Snort HTTP inspect module global configuration variables transport-security-state HSTS preloaded list in machine-readable format https://cs.chromium.org/chromium/src/net/http/transport_security_state_static.json uri-spec-issues Messages to the URI-WG mailing list about ambiguous URI syntax variable-name-strings Commonly lucrative HTTP GET query variable names variable-value-strings Typical HTTP GET query variable values webdev-security-checklist A web developer security checklist from https://www.powerdown.io/blog/posts/web-developer-security-checklist.html whatwg-urlstd-examples Examples in (URL Standard)[https://url.spec.whatwg.org]