-
Notifications
You must be signed in to change notification settings - Fork 24.1k
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Merge pull request #299 from g0tmi1k/Fixes
- Loading branch information
Showing
4,510 changed files
with
11,408 additions
and
0 deletions.
The diff you're trying to view is too large. We only load the first 3000 changed files.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
File renamed without changes.
File renamed without changes.
File renamed without changes.
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,23 @@ | ||
| # api_wordlist | ||
| A wordlist of API names used for fuzzing web application APIs. | ||
|
|
||
| ## Contents | ||
| * api_seen_in_wild.txt - This contains API function names I've seen in the wild. | ||
| * actions.txt - All API function name verbs | ||
| * objects.txt - All API function name nouns | ||
| * actions-uppercase.txt - API function name verbs with leading character upper-case | ||
| * actions-lowercase.txt - API function name verbs with leading character lower-case | ||
| * objects-uppercase.txt - API function name nouns with leading character upper-case | ||
| * objects-lowercase.txt - API function name nouns with leading character lower-case | ||
|
|
||
| ## Usage | ||
| 1. In burpsuite, send an API request you want to fuzz to Intruder. | ||
| 2. Remove the existing API function call, and replace it with two § characters for each text file you want to use. | ||
| 3. On the "Positions" tab, set Attack type to "Cluster Bomb". | ||
| 4. On the "Payloads" tab, select 1 for the fist Payload set drop-down, then select a Payload type of "Runtime file" and navigate to the directory you downloaded these text files to. Select "actions.txt". | ||
| 5. Repeat step 4 by setting Payload set 2 to "objects.txt". | ||
| 6. (optional step - add more payload sets and set them to "objects.txt" to test for multi-part objects like "UserAccount") | ||
| 7. Start attack! | ||
|
|
||
| ## Comments | ||
| If you use this and it's helpful, I'd love to hear about it! (@dagorim). If you think I've missed any obvious word choices, I'd love to hear about that as well, or feel free to add them. |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,109 @@ | ||
| accelerate | ||
| acquire | ||
| activate | ||
| adapt | ||
| add | ||
| adjust | ||
| admin | ||
| alert | ||
| annotate | ||
| anticipate | ||
| apply | ||
| arrange | ||
| build | ||
| calculate | ||
| change | ||
| claim | ||
| collect | ||
| comm | ||
| communicate | ||
| compare | ||
| complete | ||
| compose | ||
| compute | ||
| consolidate | ||
| construct | ||
| contact | ||
| create | ||
| crush | ||
| damage | ||
| def | ||
| define | ||
| del | ||
| deliver | ||
| demo | ||
| demonstrate | ||
| dequeue | ||
| derive | ||
| design | ||
| destroy | ||
| detect | ||
| dev | ||
| develop | ||
| devise | ||
| disable | ||
| display | ||
| divide | ||
| doFor | ||
| download | ||
| enable | ||
| explode | ||
| fabricate | ||
| fashion | ||
| forge | ||
| form | ||
| generate | ||
| get | ||
| go | ||
| group | ||
| improve | ||
| inform | ||
| inquiry | ||
| interpret | ||
| kill | ||
| level | ||
| link | ||
| list | ||
| make | ||
| map | ||
| mod | ||
| multiply | ||
| originate | ||
| picture | ||
| post | ||
| preserve | ||
| produce | ||
| promote | ||
| put | ||
| queue | ||
| quit | ||
| reactivate | ||
| read | ||
| recite | ||
| record | ||
| register | ||
| remove | ||
| restore | ||
| restrict | ||
| retrieve | ||
| run | ||
| select | ||
| set | ||
| setup | ||
| show | ||
| sleep | ||
| split | ||
| start | ||
| stop | ||
| study | ||
| sub | ||
| terminate | ||
| test | ||
| understand | ||
| undo | ||
| unqueue | ||
| update | ||
| upload | ||
| upset | ||
| validate | ||
| verify |
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Original file line number | Diff line number | Diff line change |
|---|---|---|
| @@ -0,0 +1,109 @@ | ||
| Accelerate | ||
| Acquire | ||
| Activate | ||
| Adapt | ||
| Add | ||
| Adjust | ||
| Admin | ||
| Alert | ||
| Annotate | ||
| Anticipate | ||
| Apply | ||
| Arrange | ||
| Build | ||
| Calculate | ||
| Change | ||
| Claim | ||
| Collect | ||
| Com | ||
| Communicate | ||
| Compare | ||
| Complete | ||
| Compose | ||
| Compute | ||
| Consolidate | ||
| Construct | ||
| Contact | ||
| Create | ||
| Crush | ||
| Damage | ||
| Def | ||
| Define | ||
| Del | ||
| Deliver | ||
| Demo | ||
| Demonstrate | ||
| Dequeue | ||
| Derive | ||
| Design | ||
| Destroy | ||
| Detect | ||
| Dev | ||
| Develop | ||
| Devise | ||
| Disable | ||
| Display | ||
| Divide | ||
| DoFor | ||
| Download | ||
| Enable | ||
| Explode | ||
| Fabricate | ||
| Fashion | ||
| Forge | ||
| Form | ||
| Generate | ||
| Get | ||
| Go | ||
| Group | ||
| Improve | ||
| Inform | ||
| Inquiry | ||
| Interpret | ||
| Kill | ||
| Level | ||
| Link | ||
| List | ||
| Make | ||
| Map | ||
| Mod | ||
| Multiply | ||
| Originate | ||
| Picture | ||
| Post | ||
| Preserve | ||
| Produce | ||
| Promote | ||
| Put | ||
| Queue | ||
| Quit | ||
| Reactivate | ||
| Read | ||
| Recite | ||
| Record | ||
| Register | ||
| Remove | ||
| Restore | ||
| Restrict | ||
| Retrieve | ||
| Run | ||
| Select | ||
| Set | ||
| Setup | ||
| Show | ||
| Sleep | ||
| Split | ||
| Start | ||
| Stop | ||
| Study | ||
| Sub | ||
| Terminate | ||
| Test | ||
| Understand | ||
| Undo | ||
| Unqueue | ||
| Update | ||
| Upload | ||
| Upset | ||
| Validate | ||
| Verify |
Oops, something went wrong.