SecLists is the safety tester’s companion. It’s a collection of multiple types of lists used during safety assessments, collected inwards i place. List types include usernames, passwords, URLs, sensitive information patterns, fuzzing payloads, spider web shells, too many more. The destination is to enable a safety tester to describe this repo onto a novel testing box too bring access to every type of listing that may hold upward needed.
SecLists Usage Example
root@kali: # ls -lh /usr/share/seclists/
total 40K
drwxr-xr-x six source root 4.0K Mar 23 09:56 Discovery
drwxr-xr-x three source root 4.0K Mar 23 09:56 Fuzzing
drwxr-xr-x two source root 4.0K Mar 23 09:56 IOCs
drwxr-xr-x two source root 4.0K Mar 23 09:56 Miscellaneous
drwxr-xr-x eleven source root 4.0K Mar 23 09:56 Passwords
drwxr-xr-x two source root 4.0K Mar 23 09:56 Pattern-Matching
drwxr-xr-x vii source root 4.0K Mar 23 09:56 Payloads
-rwxr-xr-x 1 source root 3.5K Mar vii 16:02 README.md
drwxr-xr-x iv source root 4.0K Mar 23 09:56 Usernames
drwxr-xr-x vii source root 4.0K Mar 23 09:56 Web-Shells
root@kali: #
root@kali: # tree -d /usr/share/seclists/
/usr/share/seclists/
├── Discovery
│ ├── DNS
│ ├── Infrastructure
│ ├── SNMP
│ └── Web-Content
│ ├── CMS
│ ├── SVNDigger
│ │ ├── cat
│ │ │ ├── Conf
│ │ │ ├── Database
│ │ │ ├── Language
│ │ │ └── Project
│ │ └── context
│ ├── URLs
│ └── Web-Services
├── Fuzzing
│ └── Polyglots
├── IOCs
├── Miscellaneous
├── Passwords
│ ├── Common-Credentials
│ ├── Cracked-Hashes
│ ├── Default-Credentials
│ ├── Honeypot-Captures
│ ├── Leaked-Databases
│ ├── Malware
│ ├── Permutations
│ ├── Software
│ └── WiFi-WPA
├── Pattern-Matching
├── Payloads
│ ├── Anti-Virus
│ ├── File-Names
│ ├── Images
│ ├── PHPInfo
│ └── Zip-Bombs
├── Usernames
│ ├── Honeypot-Captures
│ └── Names
└── Web-Shells
├── FuzzDB
├── JSP
├── laudanum-0.8
│ ├── asp
│ ├── aspx
│ ├── cfm
│ ├── jsp
│ │ └── warfiles
│ │ ├── META-INF
│ │ └── WEB-INF
│ └── php
├── PHP
└── WordPress
53 directories
root@kali: #
Source:
Author: Daniel Miessler & Jason Haddix
License: MIT
Buat lebih berguna, kongsi:
