Merge pull request #2 from payloadbox/ismailtasdelen-readme-1

we are updating readme..
This commit is contained in:
İsmail Taşdelen 2020-02-24 07:48:58 +03:00 committed by GitHub
commit 98fea85c7f
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -1,2 +1,35 @@
# directory-payload-list ### Directory Payload List
Directory Payload List
#### Overview :
Our goal is to create this repo. A regular web application was to create payload lists for directory tests. Directory scans are crucial for web application testing. Possible sensitive data can be accessed with directory lists. And that's why it's so important. You can support this repo and add special payload lists for different web applications and support them. And everything is here ❤
#### Directroy Scanner Tool's :
* [Dirb](https://tools.kali.org/web-applications/dirb)
* [GoBuster](https://tools.kali.org/web-applications/gobuster)
* [Wfuzz](https://tools.kali.org/web-applications/wfuzz)
* [DirBuster](https://tools.kali.org/web-applications/dirbuster)
* [Burp Suite Intruder Feature](https://portswigger.net/burp/documentation/desktop/tools/intruder/using)
#### References :
👉 [A6-Security Misconfiguration](https://owasp.org/www-project-top-ten/OWASP_Top_Ten_2017/Top_10-2017_A6-Security_Misconfiguration)
👉 [Directory Listing](https://portswigger.net/kb/issues/00600100_directory-listing)
👉 [CWE-538: File and Directory Information Exposure](https://cwe.mitre.org/data/definitions/538.html)
👉 [CWE-548: Information Exposure Through Directory Listing](https://cwe.mitre.org/data/definitions/548.html)
#### Cloning an Existing Repository ( Clone with HTTPS )
```
https://github.com/payloadbox/directory-payload-list.git
```
#### Cloning an Existing Repository ( Clone with SSH )
```
git@github.com:payloadbox/directory-payload-list.git
```