-
Notifications
You must be signed in to change notification settings - Fork 0
Typical Target URLs
Andreas Kasper edited this page Apr 11, 2021
·
10 revisions
Here is a list of common targets we found in recent attacks:
| Path | Handled | Category | Description |
|---|---|---|---|
| /.env | ✅ | ||
| /.git/config | |||
| /.htpasswd | ✅ | ||
| /.ssh/id_rsa | ✅ | SSH | Getting a SSH-Key |
| /admin/config.php | FreePBX | Unsave Passwords stored in Config | |
| /HNAP1 | HNAP | Home Network Administration Protocol | |
| /invoker/readonly | |||
| /jenkins/login | |||
| /login | |||
| /login_sid.lua | ✅ | ||
| /manager/html | |||
| /owa/ | ✅ | Outlook Web Access | |
| /owa/auth/x.js | ✅ | Outlook Web Access | |
| /phpmyadmin/ | ✅ | phpmyadmin | Database |
| /phpmyadmin/scripts/setup.php | ✅ | phpmyadmin | Database |