mirror of
https://github.com/0x5t4l1n/hunting.git
synced 2026-05-26 11:35:51 +00:00
ba72efbc5e
Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>
79 lines
855 B
Plaintext
79 lines
855 B
Plaintext
# Common Misconfiguration Paths
|
|
|
|
# Admin panels
|
|
/admin
|
|
/admin/
|
|
/administrator
|
|
/admin/login
|
|
/admin/dashboard
|
|
/admincp
|
|
/wp-admin
|
|
/admin.php
|
|
/admin.html
|
|
|
|
# Configuration files
|
|
/.env
|
|
/config.php
|
|
/configuration.php
|
|
/config.yml
|
|
/config.json
|
|
/settings.py
|
|
/web.config
|
|
/application.properties
|
|
/.git/config
|
|
/.aws/credentials
|
|
|
|
# Backup files
|
|
/backup.sql
|
|
/database.sql
|
|
/dump.sql
|
|
/.backup
|
|
/old
|
|
/backup
|
|
/bak
|
|
/backup.zip
|
|
/site.tar.gz
|
|
|
|
# Debug/Info pages
|
|
/phpinfo.php
|
|
/info.php
|
|
/test.php
|
|
/debug
|
|
/trace
|
|
/console
|
|
/server-status
|
|
/server-info
|
|
|
|
# Directory listing
|
|
/.git/
|
|
/.svn/
|
|
/.hg/
|
|
/backup/
|
|
/temp/
|
|
/tmp/
|
|
/logs/
|
|
/log/
|
|
|
|
# Error pages that expose info
|
|
/error
|
|
/debug
|
|
/exception
|
|
/trace
|
|
|
|
# Cloud storage misconfigurations
|
|
/.aws/
|
|
/.azure/
|
|
/s3/
|
|
/.docker/
|
|
/kubernetes/
|
|
|
|
# API documentation
|
|
/api-docs
|
|
/swagger
|
|
/swagger.json
|
|
/swagger-ui
|
|
/api/v1/documentation
|
|
/docs
|
|
/graphql
|
|
/graphiql
|