[Web]你需要一份祖传的目录爆破字典

Apache和网站相关文件

1
2
/.htaccess
/.htpasswd

版本控制相关文件

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
/.DS_Store
/.ds_store
/.buildpath
/.cvsignore
/.git
/.git/HEAD
/.git/config
/.git/index
/.gitignore
/.old
/.settings
/.svn
/.svn/entries
/.svn/text-base/
/static/.svn/entries
/.hg/
/CHANGELOG.TXT
/CHANGELOG.txt
/README
/README.md
/backup.rar
/backup.sql
/backup.tar.bz2
/backup.tar.gz
/backup.tgz
/backup.zip
/backup/

home目录相关

1
2
3
4
5
6
7
8
9
/.bash_history
/.bash_history.php
/.bashrc
/.ssh
/.ssh/authorized_keys
/.ssh/id_rsa
/.ssh/id_rsa.pub
/.ssh/known_hosts
/.zsh

java相关

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
/.idea/workspace.xml
/WEB-INF/applicationContext.xml
/WEB-INF/classes/
/WEB-INF/classes/application.properties
/WEB-INF/classes/applicationContext.xml
/WEB-INF/classes/conf/datasource.xml
/WEB-INF/classes/conf/jdbc.properties
/WEB-INF/classes/conf/spring/applicationContext-datasource.xml
/WEB-INF/classes/config/applicationContext.xml
/WEB-INF/classes/data.xml
/WEB-INF/classes/dataBase.properties
/WEB-INF/classes/db.properties
/WEB-INF/classes/hibernate.cfg.xml
/WEB-INF/classes/jdbc.properties
/WEB-INF/classes/rabbitmq.xml
/WEB-INF/classes/struts_manager.xml
/WEB-INF/conf/database_config.properties
/WEB-INF/config.xml
/WEB-INF/config/db/dataSource.xml
/WEB-INF/config/dbconfig
/WEB-INF/database.properties
/WEB-INF/dwr.xml
/WEB-INF/log4j.properties
/WEB-INF/spring-cfg/applicationContext.xml
/WEB-INF/spring.xml
/WEB-INF/struts-config.xml
/WEB-INF/struts/struts-config.xml
/WEB-INF/web.properties
/WEB-INF/web.xml
/WEB-INF/web.xml.bak
/Web.config
/WEB-INF./web.xml

常用路径

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
/Console/
/console
/DATA/
/DATABASE/
/DB/
/MYSQL/
/MySQL/
/SQL
/mydata
/ThinkPHP
/ThinkPHP/LICENSE.txt
/ThinkPHP/ThinkPHP.php
/_phpmyadmin/
/admin
/admin-console/
/admin-control/
/admin.do
/admin.html
/admin.jsp
/admin.asp
/admin.aspx
/admin.php
/admina.php
/adminb.php
/adminc.php
/adminn.php
/adminm.php
/admin/login.php
/administrator/
/administrator.php
/administrator.asp
/administrator.aspx
/administrator.jsp
/administrator.do
/adminlogin.asp
/adminlogin.do
/adminlogin.jsp
/adminlogin.php
/admin/adminlogin.asp
/back/
/backend/
知识共享许可协议
本作品采用知识共享署名-非商业性使用-相同方式共享 4.0 国际许可协议进行许可。