Compare commits

...

3 commits

Author SHA1 Message Date
ItsIgnacioPortal
b99e58ce2a
feat(docs): Added additional guidelines for making new contributions
Some checks are pending
Readme updater - Updates readme with latest stats / update-readme (push) Waiting to run
2025-11-25 20:08:00 -03:00
github-actions[bot]
0b896e7bf2 [Github Action] Automated readme update. 2025-11-25 22:31:00 +00:00
Dominique RIGHETTO
9e464dfd33
fix(wordlist): Remove potentially dangerous payload from the 'wso2-enterprise' wordlist (PR #1268)
Fixes #1267
2025-11-25 19:29:47 -03:00
3 changed files with 39 additions and 2 deletions

View file

@ -10,6 +10,43 @@ If you have any ideas for things we should include, please use ONE of the follow
Significant effort SHOULD be made to give attribution for these lists whenever possible, and if you are a list owner or know who the original author/curator is, please let us know so we can give proper credit.
## Wordlist content
If you're uploading a new Wordlist, make sure to follow these guidelines.
### Remove leading slashes
Do not include leading slashes in the wordlists contents. This ensures all SecLists wordlists have the same format, and also helps keep the wordlist filesize down.
- ❌ `/path/to/something`
- ✅ `path/to/something`
### Remove duplicates
> [!IMPORTANT]
> If you're on Windows, you'll need to install [Cygwin](https://cygwin.com/) to use these commands.
You can remove duplicate lines from any wordlists using the command:
- On Linux: `sort -u your_wordlist.txt --output clean_file.txt`
- On Windows (Powershell): `&"C:\cygwin64\bin\sort.exe" -u your_wordlist.txt --output clean_file.txt`
If the order of the lines matters, for example if you're uploading a wordlist of passwords where they are sorted by probability, then you can instead use this command instead:
- On Linux: `gawk '!seen[$0]++' your_wordlist.txt > clean_file.txt'`
- On Windows (Powershell): `&"C:\cygwin64\bin\gawk.exe" '!seen[$0]++' your_wordlist.txt > clean_file.txt'`
### Remove ambiguous lines
Purpose-specific wordlists with exceedingly common lines such as `index.html` and `.git` are likely to cause false positives when used against a target. It's recommended to remove these lines before uploading.
### Consider using placeholders
If the wordlist contains URL parameters, consider that it may be beneficial to replace those parameters with placeholders, and then reference those placeholders in the documentation.
For example:
- ❌ `path/to/auth?password=somePassword496`
- ✅ `path/to/auth?password={PASSWORD_PLACEHOLDER}`
## Folder naming scheme
Folders should be named with the train case scheme, for example `File-System`.

View file

@ -65,7 +65,7 @@ carbon/userstore/index.jsp?region=region1&item=user_mgt_menu_list
carbon/userstore_config/index.jsp?region=region1&item=userstores_mgt_menu_list
carbon/userstore_config/userstore-config.jsp?region=region1&item=userstores_mgt_menu_add
carbon/viewflows/index.jsp?region=region4&item=flows_menu
carbon/wsdl2code/index.jsp?generateClient=http://320932f0d81e:8280/services/wso2carbon-sts?wsdl&toppage=false&endpoints=wso2carbon-stsHttpsSoap11Endpoint,wso2carbon-stsHttpsSoap12Endpoint
carbon/wsdl2code/index.jsp?generateClient=http://127.0.0.1/services/wso2carbon-sts?wsdl&toppage=false&endpoints=wso2carbon-stsHttpsSoap11Endpoint,wso2carbon-stsHttpsSoap12Endpoint
carbon/wsdl2code/index.jsp?region=region5&item=wsdl2java_menu
carbon/wsdl_validator/index.jsp?region=region5&item=wsdl_validator_menu
carbon/yui/build/container/assets/skins/sam/container.css

View file

@ -31,7 +31,7 @@ This project is maintained by [Daniel Miessler](https://danielmiessler.com/), [J
![Repo size](https://img.shields.io/github/repo-size/danielmiessler/SecLists.svg)
<!-- This badge is automatically updated by a GitHub Action. Do not edit manually. -->
![Approx cloning time](https://img.shields.io/badge/clone%20time-~%207m%2010s%20@50Mb/s-blue)
![Approx cloning time](https://img.shields.io/badge/clone%20time-~%207m%2014s%20@50Mb/s-blue)
- - -