# BlogCorp Fuzzing Wordlist # Utilisation: ffuf -u http://target/FUZZ -w wordlist.txt -fs 2045 # Pages principales index.php search.php login.php contact.php article.php dashboard.php register.php profile.php settings.php admin.php logout.php signup.php signin.php auth.php user.php users.php account.php password.php forgot.php reset.php verify.php confirm.php activate.php deactivate.php # Pages de contenu about.php faq.php help.php support.php terms.php privacy.php legal.php cookies.php sitemap.php archive.php categories.php tags.php authors.php comments.php reviews.php ratings.php feedback.php newsletter.php subscribe.php unsubscribe.php # Répertoires courants admin/ secret/ backup/ uploads/ api/ images/ css/ js/ static/ assets/ includes/ lib/ tmp/ temp/ old/ new/ dev/ test/ debug/ log/ logs/ bin/ cgi/ cgi-bin/ conf/ config/ data/ db/ database/ docs/ download/ downloads/ error/ errors/ files/ fonts/ icons/ inc/ install/ mail/ media/ module/ modules/ package/ packages/ php/ plugin/ plugins/ public/ resources/ scripts/ src/ system/ templates/ themes/ upload/ vendor/ view/ views/ # Sous-répertoires admin admin/config/ admin/users/ admin/settings/ admin/logs/ admin/backup/ admin/upload/ admin/files/ admin/database/ # Sous-répertoires API api/v1/ api/v2/ api/v3/ api/users/ api/config/ api/status/ api/health/ api/docs/ api/auth/ api/login/ api/logout/ api/search/ api/upload/ api/download/ api/backup/ api/debug/ api/test/ # Fichiers de config exposés config.php.bak config.bak config.old config.txt config.inc.php wp-config.php .htaccess .htpasswd .env .env.local .env.production .env.development .env.backup web.config server-status server-info php.ini php.ini.bak phpinfo.php info.php test.php phpunit.xml composer.json composer.lock package.json yarn.lock Makefile Dockerfile docker-compose.yml docker-compose.yaml .gitignore .gitattributes # Fichiers backup db.sql.bak backup.sql backup.zip backup.tar.gz backup.rar backup.7z database.sql dump.sql data.sql users.sql db_backup.sql db_backup.zip db_backup.tar.gz backup_db.sql backup_database.sql backup_2024.sql backup_2025.sql backup_2026.sql site_backup.zip site_backup.tar.gz www.zip www.tar.gz web.zip web.tar.gz # Fichiers d'indexation robots.txt sitemap.xml sitemap_index.xml crossdomain.xml favicon.ico favicon.png favicon.svg apple-touch-icon.png manifest.json browserconfig.xml # Fichiers système .git/config .git/HEAD .git/logs/HEAD .git/refs/heads/main .git/refs/heads/master .DS_Store Thumbs.db Desktop.ini ._.DS_Store # Fichiers de logs access.log error.log debug.log application.log php_error.log php.log server.log access_log error_log debug_log # Fichiers sensibles passwd shadow hosts htpasswd credentials.json secrets.json private.key private.pem public.key public.pem id_rsa id_rsa.pub id_dsa id_dsa.pub id_ecdsa id_ecdsa.pub id_ed25519 id_ed25519.pub token.json token.txt api_key.txt apikey.txt secret.txt password.txt credentials.txt # CMS courants wp-admin/ wp-login.php wp-content/ wp-includes/ administrator/ phpmyadmin/ pma/ myadmin/ adminer.php adminer/ cms/ wordpress/ joomla/ drupal/ magento/ prestashop/ opencart/ woocommerce/ shopify/ # Extensions courantes index.html index.htm index.php3 index.php4 index.php5 index.phtml default.php default.html default.htm readme.txt README.md README.txt CHANGELOG.md CHANGELOG.txt LICENSE LICENSE.txt INSTALL.txt INSTALL.md TODO.txt TODO.md UPGRADE.txt UPGRADE.md # Dossiers cachés .hidden/ .private/ .secrets/ .backups/ .archive/ .config/ .ssh/ .travis/ .github/ .vscode/ .idea/ .cache/ .cron/ .incoming/ .lost+found/ .mount/ /opt/ .proc/ .run/ .snap/ .srv/ .sys/ .usr/ .var/ .web/ .www/ .wwwhome/ .webadmin/ # Fichiers PHP courants member.php members.php accounts.php profiles.php preferences.php options.php config.php configuration.php setup.php install.php update.php upgrade.php migrate.php migration.php debug.php status.php health.php ping.php version.php # Fichiers de maintenance maintenance.php maintenance.html maintenance.htm coming-soon.php coming-soon.html under-construction.php under-construction.html temporary.php temporary.html offline.php offline.html error.php error.html 404.php 403.php 500.php 502.php 503.php # Fichiers de documentation doc/ documentation/ help/ support/ faq/ tutorial/ tutorials/ guide/ guides/ manual/ readme/ README/ HELP/ SUPPORT/ FAQ/ DOCS/ DOC/ DOCUMENTATION/