# Admin Panel
/admin/
/config/
/manage/
/backup/
/backend/
/administrator/
/admin-console/
/admin-control/
/control
/houtai/
/back/
/Console/
/ControlPanel/
/server-status
/server-info/
/api
/app-admin
/app/config/database.yml
/cgi-admin
/cms-admin
/solr/admin/
/admin.php
/admin.jsp
/admin.do
/login.php
/login.jsp
/login.do
/admin.html
/index.php/login/
/conf
/test
/cache
/cms

# Web Editors
/edit
/editor
/ewebeditor/
/editor/ewebeditor/
/editor/FCKeditor/
/edit/
/ckfinder/
/fckeditor
/inc/fckeditor
/include/fckeditor
/plugins/editors/fckeditor
/plugins/fckeditor

# Tomcat Examples
/examples
/examples/servlets/servlet/SessionExample
/manager/html

# Database
/db/
/data/
/database/
/sqladm
/sql
/SQL
/sqladmin
/mysql
/MySQL/
/sqlnet.log
/data/user.txt
/user.txt
/phpinfo.php
/info.php
/index.php
/mysql.php
/sql.php
/mysql/add_user.php
/cachemonitor/statistics.jsp
/test.php
/test2.php
/test.jsp
/test2.php
/test.html
/test2.html
/test.txt
/test2.txt
/debug.php
/t.php
/i.php
/upload
/upload.php
/upload.do
/upload.jsp
/upload.html
/swfupload/swfupload.swf
/swfupload
/js/swfupload/swfupload.swf
/uploadify
/jmx-console/
/jmx-console/HtmlAdaptor
/cacti/
/zabbix/
/jira/
/nagios/
/kibana/
/jenkins/
/memadmin/index.php
/phpmyadmin/index.php
/_phpmyadmin/index.php
/pma/index.php
/php-my-admin/index.php
/php-myadmin/index.php
/php_my_admin/index.php
/pmadmin/index.php
/pmyadmin/index.php
/pmd/index.php
/phpmyadmin2/index.php
/phpmyadmin3/index.php
/phpmyadmin2014/index.php
/phpmyadmin2015/index.php

# Directory traversal
/../../../../../../../../../../../../../etc/passwd
//../../../../../../../../../../../../../etc/passwd
/../../../../../../../../../../../../../etc/hosts
/../../../../../../../../../../../../../etc/sysconfig/network-scripts/ifcfg-eth1
/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/etc/passwd
/..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd
/%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2f%2e%2e%2fetc%2fpasswd
//././././././././././././././././././././././././../../../../../../../../etc/passwd
/etc/passwd
/etc/hosts

# Discuz!
/config/config_ucenter.php.bak
/bbs/config/config_ucenter.php.bak
/config/config_global.php.1
/uc_server/data/config.inc.php.bak
/config/config_global.php.bak
/uc_server/data/config.inc.php.bak
/include/config.inc.php
/include/config.inc.php.temp
/bbs/.config.inc.php.swp
/access.log
/error.log
/errors.log
/debug.log
/.bash_history
/.bash_history.php
/.bashrc
/.cvsignore
/.DS_Store
/.history
/.htaccess
/htaccess.bak
/htaccess.txt
/.htpasswd
/.htpasswd.bak
/nohup.out
/.idea/workspace.xml
/.mysql_history
/.old
/.passwd
/.ssh
/httpd.conf
/id_dsa
/Web.config

# webshell
/shell.php
/shell.jsp
/hack.php
/1.php
/1.asp
/1.jsp
/hack.jsp
/hack.asp
/spy.php
/phpspy.php
/webshell.php
/angle.php
/s.php
/php.php
/a.php
/b.php
/browser.jsp
/.zip
/.rar
/.tar.gz
/.tar.bz2
/.tgz
/admin.zip
/admin.rar
/admin.tar.gz
/admin.tar.bz2
/admin.tgz
/backup.zip
/backup.rar
/backup.tar.gz
/backup.tgz
/back.tar.bz2
/db.zip
/db.rar
/db.tar.gz
/db.tgz
/db.tar.bz2
/db.log
/db.inc
/db.sqlite
/data.zip
/data.rar
/data.tar.gz
/data.tgz
/data.tar.bz2
/database.zip
/database.rar
/database.tar.gz
/database.tgz
/database.tar.bz2
/ftp.zip
/ftp.rar
/ftp.tar.gz
/ftp.tgz
/ftp.tar.bz2
/log.txt
/log.tar.gz
/log.rar
/log.zip
/log.tgz
/log.tar.bz2
/web.zip
/web.rar
/web.tar.gz
/web.tgz
/web.tar.bz2
/www.log
/www.zip
/www.rar
/www.tar.gz
/www.tgz
/www.tar.bz2
/wwwroot.zip
/wwwroot.rar
/wwwroot.tar.gz
/wwwroot.tgz
/wwwroot.tar.bz2
/sql.log
/sql.zip
/sql.rar
/sql.tar.gz
/sql.tgz
/sql.tar.bz2
/sql.inc
/data.sql
/database.sql
/db.sql
/test.sql
/admin.sql
/backup.sql
/user.sql
/sql.sql
/index.zip
/index.7z
/index.bak
/index.rar
/index.tar.tz
/index.tar.bz2
/index.tar.gz

# Resin
/resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=/etc/passwd
/resin-doc/viewfile/?contextpath=/&servletpath=&file=index.jsp
# Java web

/WEB-INF/web.xml
/WEB-INF/web.xml.bak
/WEB-INF/applicationContext.xml
/WEB-INF/applicationContext-slave.xml
/WEB-INF/config.xml
/WEB-INF/spring.xml
/WEB-INF/struts-config.xml
/WEB-INF/struts-front-config.xml
/WEB-INF/struts/struts-config.xml
/WEB-INF/classes/
/WEB-INF/classes/config/
/WEB-INF/classes/spring.xml
/WEB-INF/classes/struts.xml
/WEB-INF/classes/struts_manager.xml
/WEB-INF/classes/conf/datasource.xml
/WEB-INF/classes/data.xml
/WEB-INF/classes/config/applicationContext.xml
/WEB-INF/classes/applicationContext.xml
/WEB-INF/classes/conf/spring/applicationContext-datasource.xml
/WEB-INF/config/db/dataSource.xml
/WEB-INF/spring-cfg/applicationContext.xml
/WEB-INF/dwr.xml
/WEB-INF/classes/hibernate.cfg.xml
/WEB-INF/classes/rabbitmq.xml
/WEB-INF/database.properties
/WEB-INF/web.properties
/WEB-INF/log4j.properties
/WEB-INF/classes/dataBase.properties
/WEB-INF/classes/application.properties
/WEB-INF/classes/jdbc.properties
/WEB-INF/classes/db.properties
/WEB-INF/classes/conf/jdbc.properties
/WEB-INF/classes/security.properties
/WEB-INF/conf/database_config.properties
/WEB-INF/config/dbconfig
/WEB-INF/conf/activemq.xml
/server.xml
/config/database.yml

# Zend framework configuration file information disclosure
/application/configs/application.ini
# SVN and Git

/.svn/
/.svn/entries
/.svn/text-base/
/.git/config
/.git/index
/.git/HEAD
/CVS/Root

# Wordpress
/wp-login.php
/wp-admin/
/wp-config.inc
/wp-config.old
/wp-config.php.inc
/wp-config.php~
/wordpress/

#
/.ssh/id_rsa
/.ssh/id_rsa.pub
/.ssh/authorized_keys
/.ssh/known_hosts
/owa/
/readme
/README
/readme.html
/changelog.txt
/CHANGELOG.txt
/CHANGELOG.TXT
/info.txt
/install.log
/install.txt
/INSTALL.TXT
/config.php
/config.inc
/config.ini
/configuration.ini
/settings.php
/settings.ini
/database.csv
/database.inc
/database.log
/fantastico_fileslist.txt
/global.asa.bak
/invoker/JMXInvokerServlet
/j_security_check
/license.txt
/logfile
/logfiles
/passwd.txt
/password.txt
/php.ini
/robots.txt
/sftp-config.json