add directory paloyad list

all payload lists are right here

Intruder/default/small.txt

@@ -0,0 +1,959 @@
+0
+00
+01
+02
+03
+1
+10
+100
+1000
+123
+2
+20
+200
+2000
+2001
+2002
+2003
+2004
+2005
+3
+@
+Admin
+Administration
+CVS
+CYBERDOCS
+CYBERDOCS25
+CYBERDOCS31
+INSTALL_admin
+Log
+Logs
+Pages
+Servlet
+Servlets
+SiteServer
+Sources
+Statistics
+Stats
+W3SVC
+W3SVC1
+W3SVC2
+W3SVC3
+WEB-INF
+_admin
+_pages
+a
+aa
+aaa
+abc
+about
+academic
+access
+accessgranted
+account
+accounting
+action
+actions
+active
+adm
+admin
+admin_
+admin_login
+admin_logon
+administrat
+administration
+administrator
+adminlogin
+adminlogon
+adminsql
+admon
+adsl
+agent
+agents
+alias
+aliases
+all
+alpha
+analog
+analyse
+announcements
+answer
+any
+apache
+api
+app
+applet
+applets
+appliance
+application
+applications
+apps
+archive
+archives
+arrow
+asp
+aspadmin
+assets
+attach
+attachments
+audit
+auth
+auto
+automatic
+b
+back
+back-up
+backdoor
+backend
+backoffice
+backup
+backups
+bak
+bak-up
+bakup
+bank
+banks
+banner
+banners
+base
+basic
+bass
+batch
+bd
+bdata
+bea
+bean
+beans
+beta
+bill
+billing
+bin
+binaries
+biz
+blog
+blow
+board
+boards
+body
+boot
+bot
+bots
+box
+boxes
+broken
+bsd
+bug
+bugs
+build
+builder
+bulk
+buttons
+c
+cache
+cachemgr
+cad
+can
+captcha
+car
+card
+cardinal
+cards
+carpet
+cart
+cas
+cat
+catalog
+catalogs
+catch
+cc
+ccs
+cd
+cdrom
+cert
+certenroll
+certificate
+certificates
+certs
+cfdocs
+cfg
+cgi
+cgi-bin
+cgi-bin/
+cgi-win
+cgibin
+chan
+change
+changepw
+channel
+chart
+chat
+class
+classes
+classic
+classified
+classifieds
+client
+clients
+cluster
+cm
+cmd
+code
+coffee
+coke
+command
+commerce
+commercial
+common
+component
+compose
+composer
+compressed
+comunicator
+con
+config
+configs
+configuration
+configure
+connect
+connections
+console
+constant
+constants
+contact
+contacts
+content
+contents
+control
+controller
+controlpanel
+controls
+corba
+core
+corporate
+count
+counter
+cpanel
+create
+creation
+credit
+creditcards
+cron
+crs
+css
+customer
+customers
+cv
+cvs
+d
+daemon
+dat
+data
+database
+databases
+dav
+db
+dba
+dbase
+dbm
+dbms
+debug
+default
+delete
+deletion
+demo
+demos
+deny
+deploy
+deployment
+design
+details
+dev
+dev60cgi
+devel
+develop
+developement
+developers
+development
+device
+devices
+devs
+diag
+dial
+dig
+dir
+directory
+discovery
+disk
+dispatch
+dispatcher
+dms
+dns
+doc
+docs
+docs41
+docs51
+document
+documents
+down
+download
+downloads
+draft
+dragon
+dratfs
+driver
+dump
+dumpenv
+e
+easy
+ebriefs
+echannel
+ecommerce
+edit
+editor
+element
+elements
+email
+employees
+en
+eng
+engine
+english
+enterprise
+env
+environ
+environment
+error
+errors
+es
+esales
+esp
+established
+esupport
+etc
+event
+events
+example
+examples
+exchange
+exe
+exec
+executable
+executables
+explorer
+export
+external
+extra
+Extranet
+extranet
+fail
+failed
+fcgi-bin
+feedback
+field
+file
+files
+filter
+firewall
+first
+flash
+folder
+foo
+forget
+forgot
+forgotten
+form
+format
+formhandler
+formsend
+formupdate
+fortune
+forum
+forums
+frame
+framework
+ftp
+fun
+function
+functions
+games
+gate
+generic
+gest
+get
+global
+globalnav
+globals
+gone
+gp
+gpapp
+granted
+graphics
+group
+groups
+guest
+guestbook
+guests
+hack
+hacker
+handler
+hanlder
+happening
+head
+header
+headers
+hello
+helloworld
+help
+hidden
+hide
+history
+hits
+home
+homepage
+homes
+homework
+host
+hosts
+htdocs
+htm
+html
+htmls
+ibm
+icons
+idbc
+iis
+images
+img
+import
+inbox
+inc
+include
+includes
+incoming
+incs
+index
+index2
+index_adm
+index_admin
+indexes
+info
+information
+ingres
+ingress
+ini
+init
+input
+install
+installation
+interactive
+internal
+internet
+intranet
+intro
+inventory
+invitation
+invite
+ipp
+ips
+j
+java
+java-sys
+javascript
+jdbc
+job
+join
+jrun
+js
+jsp
+jsps
+jsr
+keep
+kept
+kernel
+key
+lab
+labs
+launch
+launchpage
+ldap
+left
+level
+lib
+libraries
+library
+libs
+link
+links
+linux
+list
+load
+loader
+lock
+lockout
+log
+logfile
+logfiles
+logger
+logging
+login
+logo
+logon
+logout
+logs
+lost%2Bfound
+ls
+magic
+mail
+mailbox
+maillist
+main
+maint
+makefile
+man
+manage
+management
+manager
+manual
+map
+market
+marketing
+master
+mbo
+mdb
+me
+member
+members
+memory
+menu
+message
+messages
+messaging
+meta
+metabase
+mgr
+mine
+minimum
+mirror
+mirrors
+misc
+mkstats
+model
+modem
+module
+modules
+monitor
+mount
+mp3
+mp3s
+mqseries
+mrtg
+ms
+ms-sql
+msql
+mssql
+music
+my
+my-sql
+mysql
+names
+navigation
+ne
+net
+netscape
+netstat
+network
+new
+news
+next
+nl
+nobody
+notes
+novell
+nul
+null
+number
+object
+objects
+odbc
+of
+off
+office
+ogl
+old
+oldie
+on
+online
+open
+openapp
+openfile
+operator
+oracle
+oradata
+order
+orders
+outgoing
+output
+pad
+page
+pages
+pam
+panel
+paper
+papers
+pass
+passes
+passw
+passwd
+passwor
+password
+passwords
+path
+pdf
+perl
+perl5
+personal
+personals
+pgsql
+phone
+php
+phpMyAdmin
+phpmyadmin
+pics
+ping
+pix
+pl
+pls
+plx
+pol
+policy
+poll
+pop
+portal
+portlet
+portlets
+post
+postgres
+power
+press
+preview
+print
+printenv
+priv
+private
+privs
+process
+processform
+prod
+production
+products
+professor
+profile
+program
+project
+proof
+properties
+protect
+protected
+proxy
+ps
+pub
+public
+publish
+publisher
+purchase
+purchases
+put
+pw
+pwd
+python
+query
+queue
+quote
+ramon
+random
+rank
+rcs
+readme
+redir
+redirect
+reference
+references
+reg
+reginternal
+regional
+register
+registered
+release
+remind
+reminder
+remote
+removed
+report
+reports
+requisite
+research
+reseller
+resource
+resources
+responder
+restricted
+retail
+right
+robot
+robotics
+root
+route
+router
+rpc
+rss
+rules
+run
+sales
+sample
+samples
+save
+saved
+schema
+scr
+scratc
+script
+scripts
+sdk
+search
+secret
+secrets
+section
+sections
+secure
+secured
+security
+select
+sell
+send
+sendmail
+sensepost
+sensor
+sent
+server
+server_stats
+servers
+service
+services
+servlet
+servlets
+session
+sessions
+set
+setting
+settings
+setup
+share
+shared
+shell
+shit
+shop
+shopper
+show
+showcode
+shtml
+sign
+signature
+signin
+simple
+single
+site
+sitemap
+sites
+small
+snoop
+soap
+soapdocs
+software
+solaris
+solutions
+somebody
+source
+sources
+spain
+spanish
+sql
+sqladmin
+src
+srchad
+srv
+ssi
+ssl
+staff
+start
+startpage
+stat
+statistic
+statistics
+stats
+status
+stop
+store
+story
+string
+student
+stuff
+style
+stylesheet
+stylesheets
+submit
+submitter
+sun
+super
+support
+supported
+survey
+svc
+svn
+svr
+sw
+sys
+sysadmin
+system
+table
+tag
+tape
+tar
+target
+tech
+temp
+template
+templates
+temporal
+temps
+terminal
+test
+testing
+tests
+text
+texts
+ticket
+tmp
+today
+tool
+toolbar
+tools
+top
+topics
+tour
+tpv
+trace
+traffic
+transactions
+transfer
+transport
+trap
+trash
+tree
+trees
+tutorial
+uddi
+uninstall
+unix
+up
+update
+updates
+upload
+uploader
+uploads
+usage
+user
+users
+usr
+ustats
+util
+utilities
+utility
+utils
+validation
+validatior
+vap
+var
+vb
+vbs
+vbscript
+vbscripts
+vfs
+view
+viewer
+views
+virtual
+visitor
+vpn
+w
+w3
+w3c
+warez
+wdav
+web
+webaccess
+webadmin
+webapp
+webboard
+webcart
+webdata
+webdav
+webdist
+webhits
+weblog
+weblogic
+weblogs
+webmail
+webmaster
+websearch
+website
+webstat
+webstats
+webvpn
+welcome
+wellcome
+whatever
+whatnot
+whois
+will
+win
+windows
+word
+wordpress
+work
+workplace
+workshop
+wp
+wstats
+wusage
+www
+wwwboard
+wwwjoin
+wwwlog
+wwwstats
+xcache
+xfer
+xml
+xmlrpc
+xsl
+xsql
+xyz
+zap
+zip
+zipfiles
+zips
+~adm
+~admin
+~administrator
+~bin
+~ftp
+~guest
+~mail
+~operator
+~root
+~sys
+~sysadm
+~sysadmin
+~test
+~user
+~webmaster
+~www