├── .dockerignore ├── .gitignore ├── Dockerfile ├── README.md ├── apache2config ├── apache2.conf ├── conf.d │ ├── charset │ ├── localized-error-pages │ ├── other-vhosts-access-log │ └── security ├── envvars ├── httpd.conf ├── magic ├── mods-available │ ├── actions.conf │ ├── actions.load │ ├── alias.conf │ ├── alias.load │ ├── asis.load │ ├── auth_basic.load │ ├── auth_digest.load │ ├── authn_alias.load │ ├── authn_anon.load │ ├── authn_dbd.load │ ├── authn_dbm.load │ ├── authn_default.load │ ├── authn_file.load │ ├── authnz_ldap.load │ ├── authz_dbm.load │ ├── authz_default.load │ ├── authz_groupfile.load │ ├── authz_host.load │ ├── authz_owner.load │ ├── authz_user.load │ ├── autoindex.conf │ ├── autoindex.load │ ├── cache.load │ ├── cern_meta.load │ ├── cgi.load │ ├── cgid.conf │ ├── cgid.load │ ├── charset_lite.load │ ├── dav.load │ ├── dav_fs.conf │ ├── dav_fs.load │ ├── dav_lock.load │ ├── dbd.load │ ├── deflate.conf │ ├── deflate.load │ ├── dir.conf │ ├── dir.load │ ├── disk_cache.conf │ ├── disk_cache.load │ ├── dump_io.load │ ├── env.load │ ├── expires.load │ ├── ext_filter.load │ ├── file_cache.load │ ├── filter.load │ ├── headers.load │ ├── ident.load │ ├── imagemap.load │ ├── include.load │ ├── info.conf │ ├── info.load │ ├── jk.conf │ ├── jk.load │ ├── ldap.conf │ ├── ldap.load │ ├── log_forensic.load │ ├── mem_cache.conf │ ├── mem_cache.load │ ├── mime.conf │ ├── mime.load │ ├── mime_magic.conf │ ├── mime_magic.load │ ├── mod-security.conf │ ├── mod-security.load │ ├── negotiation.conf │ ├── negotiation.load │ ├── php5.conf │ ├── php5.load │ ├── proxy.conf │ ├── proxy.load │ ├── proxy_ajp.load │ ├── proxy_balancer.conf │ ├── proxy_balancer.load │ ├── proxy_connect.load │ ├── proxy_ftp.conf │ ├── proxy_ftp.load │ ├── proxy_http.load │ ├── proxy_scgi.load │ ├── python.load │ ├── reqtimeout.conf │ ├── reqtimeout.load │ ├── rewrite.load │ ├── setenvif.conf │ ├── setenvif.load │ ├── speling.load │ ├── ssl.conf │ ├── ssl.load │ ├── status.conf │ ├── status.load │ ├── substitute.load │ ├── suexec.load │ ├── unique_id.load │ ├── userdir.conf │ ├── userdir.load │ ├── usertrack.load │ ├── version.load │ └── vhost_alias.load ├── mods-enabled │ ├── alias.conf │ ├── alias.load │ ├── auth_basic.load │ ├── authn_file.load │ ├── authz_default.load │ ├── authz_groupfile.load │ ├── authz_host.load │ ├── authz_user.load │ ├── autoindex.conf │ ├── autoindex.load │ ├── cgi.load │ ├── dav.load │ ├── dav_fs.conf │ ├── dav_fs.load │ ├── deflate.conf │ ├── deflate.load │ ├── dir.conf │ ├── dir.load │ ├── env.load │ ├── include.load │ ├── jk.conf │ ├── jk.load │ ├── mime.conf │ ├── mime.load │ ├── mod-security.conf │ ├── mod-security.load │ ├── negotiation.conf │ ├── negotiation.load │ ├── php5.conf │ ├── php5.load │ ├── python.load │ ├── reqtimeout.conf │ ├── reqtimeout.load │ ├── rewrite.load │ ├── setenvif.conf │ ├── setenvif.load │ ├── ssl.conf │ ├── ssl.load │ ├── status.conf │ ├── status.load │ └── unique_id.load ├── ports.conf ├── sites-available │ ├── 000-default │ ├── intranet │ ├── modsecurity │ ├── moth │ ├── moth-ssl │ ├── wivet │ └── wordpress └── sites-enabled │ ├── 000-default │ ├── intranet │ ├── modsecurity │ ├── moth │ ├── moth-ssl │ ├── wivet │ └── wordpress ├── docker ├── my.cnf ├── mysqld_charset.cnf ├── run └── supervisord.conf └── webroot ├── .htaccess ├── default └── index.php ├── intranet └── index.html └── moth ├── _vti_inf.html ├── clean_unittest_generated_data.sh ├── crossdomain.xml ├── favicon.ico ├── header.php ├── hidden ├── index.html └── super │ └── index.html ├── icons └── readme.txt ├── images ├── bonsai_tiny_75x75.png └── w3af.png ├── index.php ├── invoker └── JMXInvokerServlet ├── mod_sec_log.php ├── mod_security ├── php-ids ├── phpids-0.5.4 ├── LICENSE ├── build.xml ├── docs │ ├── examples │ │ ├── cakephp │ │ │ ├── README │ │ │ ├── ids.php │ │ │ ├── intrusion.php │ │ │ └── intrusions.sql │ │ └── example.php │ └── phpdocumentor │ │ ├── PHPIDS │ │ ├── IDS_Caching.html │ │ ├── IDS_Caching_Database.html │ │ ├── IDS_Caching_File.html │ │ ├── IDS_Caching_Interface.html │ │ ├── IDS_Caching_Memcached.html │ │ ├── IDS_Caching_Session.html │ │ ├── IDS_Converter.html │ │ ├── IDS_Event.html │ │ ├── IDS_Filter.html │ │ ├── IDS_Filter_Storage.html │ │ ├── IDS_Filter_Storage_Abstract.html │ │ ├── IDS_Init.html │ │ ├── IDS_Log_Composite.html │ │ ├── IDS_Log_Database.html │ │ ├── IDS_Log_Email.html │ │ ├── IDS_Log_File.html │ │ ├── IDS_Log_Interface.html │ │ ├── IDS_Monitor.html │ │ ├── IDS_Report.html │ │ ├── _Caching---Database.php.html │ │ ├── _Caching---Factory.php.html │ │ ├── _Caching---File.php.html │ │ ├── _Caching---Interface.php.html │ │ ├── _Caching---Memcached.php.html │ │ ├── _Caching---Session.php.html │ │ ├── _Converter.php.html │ │ ├── _Event.php.html │ │ ├── _Filter---Filter.php.html │ │ ├── _Filter---Storage---Abstract.php.html │ │ ├── _Filter---Storage.php.html │ │ ├── _Filter.php.html │ │ ├── _Init.php.html │ │ ├── _Log---Composite.php.html │ │ ├── _Log---Database.php.html │ │ ├── _Log---Email.php.html │ │ ├── _Log---File.php.html │ │ ├── _Log---Interface.php.html │ │ ├── _Monitor.php.html │ │ └── _Report.php.html │ │ ├── blank.html │ │ ├── classtrees_PHPIDS.html │ │ ├── elementindex.html │ │ ├── elementindex_PHPIDS.html │ │ ├── errors.html │ │ ├── index.html │ │ ├── li_PHPIDS.html │ │ ├── media │ │ ├── banner.css │ │ └── stylesheet.css │ │ └── packages.html ├── lib │ └── IDS │ │ ├── Caching │ │ ├── Database.php │ │ ├── Factory.php │ │ ├── File.php │ │ ├── Interface.php │ │ ├── Memcached.php │ │ └── Session.php │ │ ├── Config │ │ └── Config.ini │ │ ├── Converter.php │ │ ├── Event.php │ │ ├── Filter.php │ │ ├── Filter │ │ └── Storage.php │ │ ├── Init.php │ │ ├── Log │ │ ├── Composite.php │ │ ├── Database.php │ │ ├── Email.php │ │ ├── File.php │ │ └── Interface.php │ │ ├── Monitor.php │ │ ├── Report.php │ │ ├── default_filter.json │ │ ├── default_filter.xml │ │ ├── tmp │ │ └── phpids_log.txt │ │ └── vendors │ │ └── htmlpurifier │ │ ├── HTMLPurifier.auto.php │ │ ├── HTMLPurifier.autoload.php │ │ ├── HTMLPurifier.func.php │ │ ├── HTMLPurifier.includes.php │ │ ├── HTMLPurifier.kses.php │ │ ├── HTMLPurifier.path.php │ │ ├── HTMLPurifier.php │ │ ├── HTMLPurifier.safe-includes.php │ │ └── HTMLPurifier │ │ ├── AttrCollections.php │ │ ├── AttrDef.php │ │ ├── AttrDef │ │ ├── CSS.php │ │ ├── CSS │ │ │ ├── AlphaValue.php │ │ │ ├── Background.php │ │ │ ├── BackgroundPosition.php │ │ │ ├── Border.php │ │ │ ├── Color.php │ │ │ ├── Composite.php │ │ │ ├── DenyElementDecorator.php │ │ │ ├── Filter.php │ │ │ ├── Font.php │ │ │ ├── FontFamily.php │ │ │ ├── ImportantDecorator.php │ │ │ ├── Length.php │ │ │ ├── ListStyle.php │ │ │ ├── Multiple.php │ │ │ ├── Number.php │ │ │ ├── Percentage.php │ │ │ ├── TextDecoration.php │ │ │ └── URI.php │ │ ├── Enum.php │ │ ├── HTML │ │ │ ├── Bool.php │ │ │ ├── Color.php │ │ │ ├── FrameTarget.php │ │ │ ├── ID.php │ │ │ ├── Length.php │ │ │ ├── LinkTypes.php │ │ │ ├── MultiLength.php │ │ │ ├── Nmtokens.php │ │ │ └── Pixels.php │ │ ├── Integer.php │ │ ├── Lang.php │ │ ├── Switch.php │ │ ├── Text.php │ │ ├── URI.php │ │ └── URI │ │ │ ├── Email.php │ │ │ ├── Email │ │ │ └── SimpleCheck.php │ │ │ ├── Host.php │ │ │ ├── IPv4.php │ │ │ └── IPv6.php │ │ ├── AttrTransform.php │ │ ├── AttrTransform │ │ ├── Background.php │ │ ├── BdoDir.php │ │ ├── BgColor.php │ │ ├── BoolToCSS.php │ │ ├── Border.php │ │ ├── EnumToCSS.php │ │ ├── ImgRequired.php │ │ ├── ImgSpace.php │ │ ├── Input.php │ │ ├── Lang.php │ │ ├── Length.php │ │ ├── Name.php │ │ ├── SafeEmbed.php │ │ ├── SafeObject.php │ │ ├── SafeParam.php │ │ ├── ScriptRequired.php │ │ └── Textarea.php │ │ ├── AttrTypes.php │ │ ├── AttrValidator.php │ │ ├── Bootstrap.php │ │ ├── CSSDefinition.php │ │ ├── ChildDef.php │ │ ├── ChildDef │ │ ├── Chameleon.php │ │ ├── Custom.php │ │ ├── Empty.php │ │ ├── Optional.php │ │ ├── Required.php │ │ ├── StrictBlockquote.php │ │ └── Table.php │ │ ├── Config.php │ │ ├── ConfigDef.php │ │ ├── ConfigDef │ │ ├── Directive.php │ │ ├── DirectiveAlias.php │ │ └── Namespace.php │ │ ├── ConfigSchema.php │ │ ├── ConfigSchema │ │ ├── Builder │ │ │ ├── ConfigSchema.php │ │ │ └── Xml.php │ │ ├── Exception.php │ │ ├── Interchange.php │ │ ├── Interchange │ │ │ ├── Directive.php │ │ │ ├── Id.php │ │ │ └── Namespace.php │ │ ├── InterchangeBuilder.php │ │ ├── Validator.php │ │ ├── ValidatorAtom.php │ │ ├── schema.ser │ │ └── schema │ │ │ ├── Attr.AllowedFrameTargets.txt │ │ │ ├── Attr.AllowedRel.txt │ │ │ ├── Attr.AllowedRev.txt │ │ │ ├── Attr.DefaultImageAlt.txt │ │ │ ├── Attr.DefaultInvalidImage.txt │ │ │ ├── Attr.DefaultInvalidImageAlt.txt │ │ │ ├── Attr.DefaultTextDir.txt │ │ │ ├── Attr.EnableID.txt │ │ │ ├── Attr.IDBlacklist.txt │ │ │ ├── Attr.IDBlacklistRegexp.txt │ │ │ ├── Attr.IDPrefix.txt │ │ │ ├── Attr.IDPrefixLocal.txt │ │ │ ├── Attr.txt │ │ │ ├── AutoFormat.AutoParagraph.txt │ │ │ ├── AutoFormat.Custom.txt │ │ │ ├── AutoFormat.DisplayLinkURI.txt │ │ │ ├── AutoFormat.Linkify.txt │ │ │ ├── AutoFormat.PurifierLinkify.txt │ │ │ ├── AutoFormat.RemoveEmpty.txt │ │ │ ├── AutoFormat.txt │ │ │ ├── AutoFormatParam.PurifierLinkifyDocURL.txt │ │ │ ├── AutoFormatParam.txt │ │ │ ├── CSS.AllowImportant.txt │ │ │ ├── CSS.AllowTricky.txt │ │ │ ├── CSS.AllowedProperties.txt │ │ │ ├── CSS.DefinitionRev.txt │ │ │ ├── CSS.MaxImgLength.txt │ │ │ ├── CSS.Proprietary.txt │ │ │ ├── CSS.txt │ │ │ ├── Cache.DefinitionImpl.txt │ │ │ ├── Cache.SerializerPath.txt │ │ │ ├── Cache.txt │ │ │ ├── Core.AggressivelyFixLt.txt │ │ │ ├── Core.CollectErrors.txt │ │ │ ├── Core.ColorKeywords.txt │ │ │ ├── Core.ConvertDocumentToFragment.txt │ │ │ ├── Core.DirectLexLineNumberSyncInterval.txt │ │ │ ├── Core.Encoding.txt │ │ │ ├── Core.EscapeInvalidChildren.txt │ │ │ ├── Core.EscapeInvalidTags.txt │ │ │ ├── Core.EscapeNonASCIICharacters.txt │ │ │ ├── Core.HiddenElements.txt │ │ │ ├── Core.Language.txt │ │ │ ├── Core.LexerImpl.txt │ │ │ ├── Core.MaintainLineNumbers.txt │ │ │ ├── Core.RemoveInvalidImg.txt │ │ │ ├── Core.RemoveScriptContents.txt │ │ │ ├── Core.txt │ │ │ ├── Filter.Custom.txt │ │ │ ├── Filter.ExtractStyleBlocks.txt │ │ │ ├── Filter.YouTube.txt │ │ │ ├── Filter.txt │ │ │ ├── FilterParam.ExtractStyleBlocksEscaping.txt │ │ │ ├── FilterParam.ExtractStyleBlocksScope.txt │ │ │ ├── FilterParam.ExtractStyleBlocksTidyImpl.txt │ │ │ ├── FilterParam.txt │ │ │ ├── HTML.Allowed.txt │ │ │ ├── HTML.AllowedAttributes.txt │ │ │ ├── HTML.AllowedElements.txt │ │ │ ├── HTML.AllowedModules.txt │ │ │ ├── HTML.BlockWrapper.txt │ │ │ ├── HTML.CoreModules.txt │ │ │ ├── HTML.CustomDoctype.txt │ │ │ ├── HTML.DefinitionID.txt │ │ │ ├── HTML.DefinitionRev.txt │ │ │ ├── HTML.Doctype.txt │ │ │ ├── HTML.ForbiddenAttributes.txt │ │ │ ├── HTML.ForbiddenElements.txt │ │ │ ├── HTML.MaxImgLength.txt │ │ │ ├── HTML.Parent.txt │ │ │ ├── HTML.Proprietary.txt │ │ │ ├── HTML.SafeEmbed.txt │ │ │ ├── HTML.SafeObject.txt │ │ │ ├── HTML.Strict.txt │ │ │ ├── HTML.TidyAdd.txt │ │ │ ├── HTML.TidyLevel.txt │ │ │ ├── HTML.TidyRemove.txt │ │ │ ├── HTML.Trusted.txt │ │ │ ├── HTML.XHTML.txt │ │ │ ├── HTML.txt │ │ │ ├── Output.CommentScriptContents.txt │ │ │ ├── Output.Newline.txt │ │ │ ├── Output.SortAttr.txt │ │ │ ├── Output.TidyFormat.txt │ │ │ ├── Output.txt │ │ │ ├── Test.ForceNoIconv.txt │ │ │ ├── Test.txt │ │ │ ├── URI.AllowedSchemes.txt │ │ │ ├── URI.Base.txt │ │ │ ├── URI.DefaultScheme.txt │ │ │ ├── URI.DefinitionID.txt │ │ │ ├── URI.DefinitionRev.txt │ │ │ ├── URI.Disable.txt │ │ │ ├── URI.DisableExternal.txt │ │ │ ├── URI.DisableExternalResources.txt │ │ │ ├── URI.DisableResources.txt │ │ │ ├── URI.Host.txt │ │ │ ├── URI.HostBlacklist.txt │ │ │ ├── URI.MakeAbsolute.txt │ │ │ ├── URI.Munge.txt │ │ │ ├── URI.MungeResources.txt │ │ │ ├── URI.MungeSecretKey.txt │ │ │ ├── URI.OverrideAllowedSchemes.txt │ │ │ ├── URI.txt │ │ │ └── info.ini │ │ ├── ContentSets.php │ │ ├── Context.php │ │ ├── Definition.php │ │ ├── DefinitionCache.php │ │ ├── DefinitionCache │ │ ├── Decorator.php │ │ ├── Decorator │ │ │ ├── Cleanup.php │ │ │ ├── Memory.php │ │ │ └── Template.php.in │ │ ├── Null.php │ │ ├── Serializer.php │ │ └── Serializer │ │ │ └── README │ │ ├── DefinitionCacheFactory.php │ │ ├── Doctype.php │ │ ├── DoctypeRegistry.php │ │ ├── ElementDef.php │ │ ├── Encoder.php │ │ ├── EntityLookup.php │ │ ├── EntityLookup │ │ └── entities.ser │ │ ├── EntityParser.php │ │ ├── ErrorCollector.php │ │ ├── ErrorStruct.php │ │ ├── Exception.php │ │ ├── Filter.php │ │ ├── Filter │ │ ├── ExtractStyleBlocks.php │ │ └── YouTube.php │ │ ├── Generator.php │ │ ├── HTMLDefinition.php │ │ ├── HTMLModule.php │ │ ├── HTMLModule │ │ ├── Bdo.php │ │ ├── CommonAttributes.php │ │ ├── Edit.php │ │ ├── Forms.php │ │ ├── Hypertext.php │ │ ├── Image.php │ │ ├── Legacy.php │ │ ├── List.php │ │ ├── Name.php │ │ ├── NonXMLCommonAttributes.php │ │ ├── Object.php │ │ ├── Presentation.php │ │ ├── Proprietary.php │ │ ├── Ruby.php │ │ ├── SafeEmbed.php │ │ ├── SafeObject.php │ │ ├── Scripting.php │ │ ├── StyleAttribute.php │ │ ├── Tables.php │ │ ├── Target.php │ │ ├── Text.php │ │ ├── Tidy.php │ │ ├── Tidy │ │ │ ├── Name.php │ │ │ ├── Proprietary.php │ │ │ ├── Strict.php │ │ │ ├── Transitional.php │ │ │ ├── XHTML.php │ │ │ └── XHTMLAndHTML4.php │ │ └── XMLCommonAttributes.php │ │ ├── HTMLModuleManager.php │ │ ├── IDAccumulator.php │ │ ├── Injector.php │ │ ├── Injector │ │ ├── AutoParagraph.php │ │ ├── DisplayLinkURI.php │ │ ├── Linkify.php │ │ ├── PurifierLinkify.php │ │ ├── RemoveEmpty.php │ │ └── SafeObject.php │ │ ├── Language.php │ │ ├── Language │ │ ├── classes │ │ │ └── en-x-test.php │ │ └── messages │ │ │ ├── en-x-test.php │ │ │ ├── en-x-testmini.php │ │ │ └── en.php │ │ ├── LanguageFactory.php │ │ ├── Length.php │ │ ├── Lexer.php │ │ ├── Lexer │ │ ├── DOMLex.php │ │ ├── DirectLex.php │ │ ├── PEARSax3.php │ │ └── PH5P.php │ │ ├── PercentEncoder.php │ │ ├── Printer.php │ │ ├── Printer │ │ ├── CSSDefinition.php │ │ ├── ConfigForm.css │ │ ├── ConfigForm.js │ │ ├── ConfigForm.php │ │ └── HTMLDefinition.php │ │ ├── Strategy.php │ │ ├── Strategy │ │ ├── Composite.php │ │ ├── Core.php │ │ ├── FixNesting.php │ │ ├── MakeWellFormed.php │ │ ├── RemoveForeignElements.php │ │ └── ValidateAttributes.php │ │ ├── StringHash.php │ │ ├── StringHashParser.php │ │ ├── TagTransform.php │ │ ├── TagTransform │ │ ├── Font.php │ │ └── Simple.php │ │ ├── Token.php │ │ ├── Token │ │ ├── Comment.php │ │ ├── Empty.php │ │ ├── End.php │ │ ├── Start.php │ │ ├── Tag.php │ │ └── Text.php │ │ ├── TokenFactory.php │ │ ├── URI.php │ │ ├── URIDefinition.php │ │ ├── URIFilter.php │ │ ├── URIFilter │ │ ├── DisableExternal.php │ │ ├── DisableExternalResources.php │ │ ├── HostBlacklist.php │ │ ├── MakeAbsolute.php │ │ └── Munge.php │ │ ├── URIParser.php │ │ ├── URIScheme.php │ │ ├── URIScheme │ │ ├── ftp.php │ │ ├── http.php │ │ ├── https.php │ │ ├── mailto.php │ │ ├── news.php │ │ └── nntp.php │ │ ├── URISchemeRegistry.php │ │ ├── UnitConverter.php │ │ ├── VarParser.php │ │ ├── VarParser │ │ ├── Flexible.php │ │ └── Native.php │ │ └── VarParserException.php ├── phpids.php └── tests │ ├── IDS │ ├── CachingTest.php │ ├── EventTest.php │ ├── ExceptionTest.php │ ├── FilterTest.php │ ├── InitTest.php │ ├── MonitorTest.php │ └── ReportTest.php │ ├── allTests.php │ └── coverage │ ├── Caching.html │ ├── Caching_Factory.php.html │ ├── Caching_File.php.html │ ├── Caching_Interface.php.html │ ├── Caching_Session.php.html │ ├── Converter.php.html │ ├── Event.php.html │ ├── Filter.html │ ├── Filter.php.html │ ├── Filter_Storage.php.html │ ├── Init.php.html │ ├── Monitor.php.html │ ├── Report.php.html │ ├── butter.png │ ├── chameleon.png │ ├── close12_1.gif │ ├── container-min.js │ ├── container.css │ ├── glass.png │ ├── index.html │ ├── lib.html │ ├── lib_IDS.html │ ├── lib_IDS_Caching.html │ ├── lib_IDS_Caching_Factory.php.html │ ├── lib_IDS_Caching_File.php.html │ ├── lib_IDS_Caching_Interface.php.html │ ├── lib_IDS_Caching_Session.php.html │ ├── lib_IDS_Converter.php.html │ ├── lib_IDS_Event.php.html │ ├── lib_IDS_Filter.html │ ├── lib_IDS_Filter.php.html │ ├── lib_IDS_Filter_Storage.php.html │ ├── lib_IDS_Init.php.html │ ├── lib_IDS_Monitor.php.html │ ├── lib_IDS_Report.php.html │ ├── lib_IDS_vendors.html │ ├── lib_IDS_vendors_htmlpurifier.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier.auto.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier.autoload.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrCollections.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Background.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_BackgroundPosition.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Border.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Color.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Composite.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_DenyElementDecorator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Font.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_FontFamily.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_ImportantDecorator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Length.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_ListStyle.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Multiple.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Number.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_Percentage.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_TextDecoration.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_CSS_URI.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_Enum.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_Bool.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_Color.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_FrameTarget.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_ID.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_Length.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_LinkTypes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_MultiLength.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_Nmtokens.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_HTML_Pixels.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_Integer.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_Lang.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_Switch.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_Text.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_URI.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_URI.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_URI_Host.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_URI_IPv4.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrDef_URI_IPv6.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_BdoDir.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_BgColor.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_BoolToCSS.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_Border.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_EnumToCSS.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_ImgRequired.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_ImgSpace.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_Lang.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_Length.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_Name.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTransform_ScriptRequired.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrTypes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_AttrValidator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Bootstrap.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_CSSDefinition.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef_Chameleon.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef_Empty.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef_Optional.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef_Required.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ChildDef_Table.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Config.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ConfigDef.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ConfigDef.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ConfigDef_Directive.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ConfigDef_DirectiveAlias.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ConfigSchema.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ContentSets.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Context.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Definition.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCacheFactory.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache_Decorator.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache_Decorator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache_Decorator_Cleanup.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DefinitionCache_Serializer.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Doctype.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_DoctypeRegistry.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_ElementDef.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Encoder.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_EntityLookup.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_EntityParser.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Generator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLDefinition.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModuleManager.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Bdo.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_CommonAttributes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Edit.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Hypertext.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Image.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Legacy.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_List.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_NonXMLCommonAttributes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Object.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Presentation.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Scripting.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_StyleAttribute.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tables.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Target.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Text.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy_Proprietary.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy_Transitional.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy_XHTML.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_Tidy_XHTMLAndHTML4.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_HTMLModule_XMLCommonAttributes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_IDAccumulator.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Length.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Lexer.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Lexer.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Lexer_DOMLex.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_PercentEncoder.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_Composite.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_Core.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_FixNesting.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_MakeWellFormed.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_RemoveForeignElements.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Strategy_ValidateAttributes.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_TagTransform.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_TagTransform.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_TagTransform_Font.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_TagTransform_Simple.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_TokenFactory.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_Comment.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_Empty.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_End.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_Start.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_Tag.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_Token_Text.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URI.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIDefinition.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter_DisableExternal.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter_DisableExternalResources.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter_HostBlacklist.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIFilter_MakeAbsolute.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIParser.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIScheme.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIScheme.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URISchemeRegistry.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_URIScheme_http.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_VarParser.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_VarParser.php.html │ ├── lib_IDS_vendors_htmlpurifier_HTMLPurifier_VarParser_Flexible.php.html │ ├── scarlet_red.png │ ├── snow.png │ ├── style.css │ ├── tests.html │ ├── tests_allTests.php.html │ └── yahoo-dom-event.js ├── phpinfo.php ├── portal └── page ├── python_test └── test.py ├── robots.txt ├── setup ├── README └── w3af_test.sql ├── show_source.php ├── sitemap.xml ├── urllist.txt ├── w3af ├── agent │ └── agent.php ├── audit │ ├── LDAP │ │ ├── index.html │ │ └── simple_ldap.php │ ├── MX_injection │ │ └── mxi.php │ ├── blind_sql_injection │ │ ├── bsqli_integer.php │ │ ├── bsqli_string.php │ │ ├── bsqli_string_rnd.php │ │ ├── completely_bsqli_double.php │ │ ├── completely_bsqli_integer.php │ │ ├── completely_bsqli_single.php │ │ ├── delay_random.php │ │ ├── forms │ │ │ ├── data_receptor.php │ │ │ └── test_forms.html │ │ ├── index.html │ │ ├── random.php │ │ ├── random_500_lines.php │ │ ├── random_500_lines_static.php │ │ ├── random_50_lines.php │ │ ├── random_50_lines_static.php │ │ ├── random_5_lines.php │ │ └── random_5_lines_static.php │ ├── buffer_overflow │ │ └── index.php │ ├── cgic │ │ ├── .htaccess │ │ ├── Makefile │ │ ├── buffOverflow.c │ │ ├── buffOverflow.cgi │ │ ├── capture │ │ ├── capture.c │ │ ├── capture.cgi │ │ ├── cgic.c │ │ ├── cgic.h │ │ ├── cgic.html │ │ ├── cgictest.c │ │ ├── cgictest.cgi │ │ ├── formatString.c │ │ ├── formatString.cgi │ │ ├── libcgic.a │ │ ├── license.txt │ │ ├── readme.txt │ │ └── support.txt │ ├── cors │ │ ├── cors_origin_1.php │ │ ├── cors_origin_2.php │ │ ├── cors_origin_3.php │ │ ├── cors_origin_4.php │ │ └── index.html │ ├── csrf │ │ ├── link-vote │ │ │ ├── README.txt │ │ │ ├── backend.json │ │ │ ├── countlib.php │ │ │ ├── footer.php │ │ │ ├── header.php │ │ │ ├── images │ │ │ │ ├── avatar1.png │ │ │ │ ├── avatar2.png │ │ │ │ ├── clean.png │ │ │ │ ├── green.png │ │ │ │ └── logo.png │ │ │ ├── index.php │ │ │ └── vote.php │ │ ├── referer-rnd │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── referer │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── referer_lib.php │ │ ├── rnd_lib.php │ │ ├── secure-no-replay-rnd │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── secure-no-replay │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── secure-replay-allowed-rnd │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── secure-replay-allowed │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── vulnerable-rnd │ │ │ ├── buy.php │ │ │ └── index.php │ │ ├── vulnerable-token-ignored │ │ │ ├── buy.php │ │ │ └── index.php │ │ └── vulnerable │ │ │ ├── buy.php │ │ │ └── index.php │ ├── dav │ │ ├── .gitignore │ │ ├── no-privileges │ │ │ └── .gitignore │ │ └── write-all │ │ │ └── .gitignore │ ├── eval │ │ ├── .htaccess │ │ ├── eval-blind.php │ │ ├── eval.php │ │ ├── eval.pl │ │ ├── exec.py │ │ └── index.html │ ├── file_upload │ │ ├── index.html │ │ ├── uploader.php │ │ └── uploads │ │ │ └── .gitignore │ ├── format_string │ │ ├── format_string.php │ │ └── index.html │ ├── global_redirect │ │ ├── 302-filtered.php │ │ ├── 302.php │ │ ├── index.html │ │ ├── java.php │ │ ├── meta.php │ │ ├── refresh-header.php │ │ └── test-xss.php │ ├── hpp │ │ ├── election.php │ │ ├── footer.php │ │ ├── header.php │ │ ├── html5reset.css │ │ ├── html5simple.css │ │ ├── index.php │ │ ├── self_url.php │ │ ├── vote-log.php │ │ └── vote.php │ ├── htaccess_methods │ │ ├── index.html │ │ └── restricted │ │ │ └── index.php │ ├── index.html │ ├── local_file_inclusion │ │ ├── false_positive.php │ │ ├── includes │ │ │ └── index.html │ │ ├── index.html │ │ ├── index2.html │ │ ├── lfi_1.php │ │ ├── lfi_2.php │ │ └── trivial_lfi.php │ ├── local_file_read │ │ ├── local_file_read.php │ │ └── section.txt │ ├── mailer │ │ ├── dataReceptor.php │ │ └── index.html │ ├── os_commanding │ │ ├── blind_osc.php │ │ ├── index.html │ │ ├── param_osc.php │ │ ├── passthru.php │ │ ├── simple_osc.php │ │ ├── vulnerable.php │ │ └── vulnerable2.php │ ├── phishing_vector │ │ ├── frame_phishing.php │ │ ├── http_blacklist_phishing.php │ │ ├── iframe_phishing.php │ │ └── index.html │ ├── preg_replace │ │ ├── index.html │ │ ├── preg_all_regex.php │ │ └── preg_section_regex.php │ ├── response_splitting │ │ ├── index.html │ │ ├── response_splitting.asp │ │ ├── response_splitting.php │ │ └── response_splitting_err.php │ ├── rfi │ │ ├── section.php │ │ ├── toBeIncluded.txt │ │ └── vulnerable.php │ ├── sql_injection │ │ ├── index.html │ │ ├── recreate_tables.php │ │ ├── select │ │ │ ├── form_sql_injection.html │ │ │ ├── form_sql_injection.php │ │ │ ├── sql_injection_integer.php │ │ │ ├── sql_injection_no_results.php │ │ │ ├── sql_injection_string.php │ │ │ └── sql_injection_table.php │ │ └── sql_injection_false_positive.php │ ├── ssi │ │ ├── date.shtml │ │ ├── index.html │ │ ├── messages.shtml │ │ ├── ssi-lfr.php │ │ └── view-messages.shtml │ ├── xpath │ │ ├── funcs.php │ │ ├── index.html │ │ ├── xpath-attr-double.php │ │ ├── xpath-attr-single.php │ │ ├── xpath-echo.php │ │ ├── xpath-empty.php │ │ ├── xpath-or.php │ │ ├── xpath-random500.php │ │ ├── xpath-tag.php │ │ └── xpath.xml │ ├── xss │ │ ├── 302 │ │ │ ├── 302.php │ │ │ ├── index.html │ │ │ └── printer.php │ │ ├── .htaccess │ │ ├── data_receptor.php │ │ ├── data_receptor2.php │ │ ├── data_receptor3.php │ │ ├── index.html │ │ ├── no_tag_xss.php │ │ ├── repeated_params │ │ │ ├── index.php │ │ │ ├── qs_repeat.php │ │ │ └── qs_repeat_all.php │ │ ├── security-4ad0fd86e8.php │ │ ├── simple_xss.php │ │ ├── simple_xss_no_js.php │ │ ├── simple_xss_no_quotes.php │ │ ├── simple_xss_no_script.php │ │ ├── simple_xss_no_script_2.php │ │ ├── stored │ │ │ ├── data.txt │ │ │ ├── index.html │ │ │ ├── reader.php │ │ │ └── writer.php │ │ ├── test-forms.html │ │ ├── test-forms2.html │ │ ├── test-forms3.html │ │ ├── xss_filter.php │ │ ├── xss_filter_2.php │ │ ├── xss_filter_3.php │ │ ├── xss_filter_4.php │ │ ├── xss_filter_5.php │ │ ├── xss_filter_6.php │ │ ├── xss_filter_7.php │ │ ├── xss_with_safe_csp.php │ │ └── xss_with_weak_csp.php │ └── xxe │ │ ├── test.xml │ │ └── xxe-basic.php ├── auth │ ├── detailed │ │ ├── auth.php │ │ ├── config.php │ │ ├── home.php │ │ └── index.php │ └── generic │ │ ├── auth.php │ │ ├── config.php │ │ ├── home.php │ │ └── index.php ├── bruteforce │ ├── basic_auth │ │ ├── easy_guess │ │ │ ├── .htpasswd │ │ │ ├── abc │ │ │ │ ├── index.html │ │ │ │ ├── index2.html │ │ │ │ └── index3.html │ │ │ └── index.html │ │ └── impossible_guess │ │ │ └── .htpasswd │ ├── digest_auth │ │ ├── easy_guess │ │ │ ├── .htpasswd │ │ │ ├── abc │ │ │ │ ├── index.html │ │ │ │ ├── index2.html │ │ │ │ └── index3.html │ │ │ └── index.html │ │ └── impossible_guess │ │ │ └── .htpasswd │ ├── form_login │ │ ├── hidden-section.html │ │ ├── impossible_login.html │ │ ├── impossible_login.php │ │ ├── index.html │ │ ├── login-password-only.php │ │ ├── login.php │ │ ├── only-password.html │ │ ├── only-users.php │ │ ├── with_get.html │ │ └── with_post.html │ └── index.html ├── core │ ├── 404 │ │ ├── exists.html │ │ ├── index.html │ │ └── simple_test.html │ ├── ajax │ │ ├── GetCustomerData.php │ │ ├── customers.sql │ │ └── index.html │ ├── base_false_positive │ │ ├── delay_empty.php │ │ ├── delay_empty_html.php │ │ ├── delay_random.php │ │ ├── delay_random_500_lines.php │ │ ├── delay_random_500_lines_static.php │ │ ├── delay_random_50_lines.php │ │ ├── delay_random_50_lines_static.php │ │ ├── delay_random_5_lines.php │ │ ├── delay_random_5_lines_static.php │ │ ├── empty.php │ │ ├── empty_html.php │ │ ├── footer.php │ │ ├── header.php │ │ ├── index.html │ │ ├── lorem.php │ │ ├── php_error.php │ │ ├── php_error_2.php │ │ ├── random.php │ │ ├── random_1_byte.php │ │ ├── random_500_lines.php │ │ ├── random_500_lines_static.php │ │ ├── random_50_lines.php │ │ ├── random_50_lines_static.php │ │ ├── random_5_lines.php │ │ └── random_5_lines_static.php │ ├── code_coverage │ │ └── coverage.php │ ├── cookieFuzzing │ │ └── cf.php │ ├── cookie_handler │ │ ├── has-cookie.php │ │ └── set-cookie.php │ ├── echo │ │ └── post.php │ ├── encoding │ │ ├── euc-jp │ │ │ ├── index.php │ │ │ ├── jap1.php │ │ │ ├── jap2.php │ │ │ ├── vúlnerable.php │ │ │ ├── é.html │ │ │ └── ファイルの.html │ │ ├── index.html │ │ ├── spaces │ │ │ ├── foo.html │ │ │ ├── form_input_plus_GET.html │ │ │ ├── form_input_plus_POST.html │ │ │ ├── index.html │ │ │ ├── queryxpath.php │ │ │ └── start end.html │ │ ├── utf-8 │ │ │ ├── index.html │ │ │ ├── russian.html │ │ │ ├── vúlnerable.php │ │ │ ├── é.html │ │ │ └── 改.php │ │ └── windows-1255 │ │ │ ├── heb1.php │ │ │ ├── heb2.php │ │ │ ├── index.html │ │ │ ├── readme.txt │ │ │ └── קובץ.html │ ├── flash │ │ └── login.swf │ ├── fuzzFileContent │ │ ├── index.html │ │ └── uploader.php │ ├── fuzzFileName │ │ ├── .htaccess │ │ └── f00.php │ ├── fuzzURLParts │ │ ├── .htaccess │ │ ├── config.php │ │ ├── index.php │ │ ├── news.db │ │ └── news.php │ ├── header_fuzzing │ │ ├── cookie_echo.php │ │ └── index.php │ ├── htmlParser │ │ ├── abc.php │ │ ├── input_out_of_form_1.html │ │ ├── input_out_of_form_2.html │ │ ├── input_out_of_form_3.html │ │ ├── login.html │ │ ├── login_files │ │ │ ├── bg_encabe.jpg │ │ │ ├── cenco_style.css │ │ │ ├── logo_cenco.jpg │ │ │ ├── logo_easy.jpg │ │ │ ├── pie_bg_ctro.gif │ │ │ ├── pie_esquina_der.gif │ │ │ ├── pie_esquina_izq.gif │ │ │ ├── solapa_der.gif │ │ │ └── solapa_izq.gif │ │ ├── repeated.html │ │ ├── repeated.php │ │ ├── simple_form.html │ │ ├── test.html │ │ ├── textarea.html │ │ ├── textarea_out_of_form_1.html │ │ ├── textarea_out_of_form_2.html │ │ ├── textarea_out_of_form_3.html │ │ ├── two_simple_forms.html │ │ ├── urlRegex.html │ │ └── urlRegexWorked.html │ ├── huge_phantom │ │ └── huge_phantom.php │ ├── json │ │ ├── GetCustomerData.php │ │ ├── customers.sql │ │ ├── index.html │ │ └── prototype.js │ ├── maxFileSize │ │ └── maxFileSize.tgz │ ├── mod404error │ │ ├── .htaccess │ │ ├── README │ │ └── error.php │ ├── ntlm_auth │ │ ├── ntlm_v1 │ │ │ └── index.php │ │ └── ntlm_v2 │ │ │ ├── index.php │ │ │ └── ntlm.php │ ├── pdfParser │ │ ├── 1.pdf │ │ └── pepe!.html │ ├── repeated_parameter_names │ │ └── repeated_parameter_names.php │ ├── strange-html │ │ ├── s3.html │ │ ├── s4.html │ │ └── strange-html.html │ ├── time_analysis │ │ └── analyze.php │ ├── unicode_header │ │ └── index.php │ └── wml_parser │ │ ├── form_sql_injection.php │ │ ├── index.html │ │ ├── link.wml │ │ ├── sql_injection_string.php │ │ ├── test_form.wml │ │ └── test_form_2.wml ├── crawl │ ├── ajax │ │ ├── ajaxContact │ │ │ ├── ajaxContact.zip │ │ │ ├── img │ │ │ │ └── loading.gif │ │ │ ├── index.php │ │ │ ├── js │ │ │ │ ├── contact.js │ │ │ │ ├── functionAddEvent.js │ │ │ │ └── xmlHttp.js │ │ │ └── scripts │ │ │ │ ├── contact.php │ │ │ │ └── xmlHttpRequest.php │ │ ├── ajaxdomainsearch │ │ │ ├── License.txt │ │ │ ├── add_bookmark.js │ │ │ ├── ajax-css.css │ │ │ ├── ajaxdomainsearch1.1.zip │ │ │ ├── ajaxforms.js │ │ │ ├── config.inc.php │ │ │ ├── favicon.ico │ │ │ ├── get.php │ │ │ ├── images │ │ │ │ ├── ajax-logo-2.gif │ │ │ │ ├── loading.gif │ │ │ │ ├── logo.gif │ │ │ │ └── strip.gif │ │ │ └── index.htm │ │ └── username-ajax.php │ ├── backdoors │ │ ├── cmd.php │ │ └── f00.html │ ├── content_negotiation │ │ ├── backup.gz │ │ ├── backup.php │ │ ├── backup.tar │ │ ├── backup.zip │ │ └── index.html │ ├── digit_sum │ │ ├── index-2-1.html │ │ ├── index-3-1.html │ │ ├── index1.html │ │ ├── index1.php │ │ ├── index2.html │ │ └── login.php │ ├── dir_file_bruter │ │ ├── iamhidden.txt │ │ ├── index.html │ │ ├── spameggs │ │ │ └── portal │ │ │ │ └── andres │ │ │ │ └── index.html │ │ └── test │ │ │ └── index.html │ ├── dot_listing │ │ ├── .listing │ │ ├── hidden.txt │ │ └── index.html │ ├── find_backdoor │ │ └── c99shell.php │ ├── find_captcha │ │ ├── LICENSE.txt │ │ ├── README.txt │ │ ├── elephant.ttf │ │ ├── gdfonts │ │ │ ├── automatic.gdf │ │ │ ├── bubblebath.gdf │ │ │ ├── caveman.gdf │ │ │ └── crass.gdf │ │ ├── images │ │ │ ├── audio_icon.gif │ │ │ └── refresh.gif │ │ ├── index.php │ │ ├── securimage.php │ │ ├── securimage_example.php │ │ ├── securimage_play.php │ │ └── securimage_show.php │ ├── find_dvcs │ │ ├── bzr │ │ │ ├── .bzr │ │ │ │ ├── README │ │ │ │ ├── branch-format │ │ │ │ ├── branch │ │ │ │ │ ├── branch.conf │ │ │ │ │ ├── format │ │ │ │ │ ├── last-revision │ │ │ │ │ └── tags │ │ │ │ ├── checkout │ │ │ │ │ ├── conflicts │ │ │ │ │ ├── dirstate │ │ │ │ │ ├── format │ │ │ │ │ └── views │ │ │ │ └── repository │ │ │ │ │ ├── format │ │ │ │ │ ├── indices │ │ │ │ │ ├── e3ec3d0e9167012df466b6a43f45991e.cix │ │ │ │ │ ├── e3ec3d0e9167012df466b6a43f45991e.iix │ │ │ │ │ ├── e3ec3d0e9167012df466b6a43f45991e.rix │ │ │ │ │ ├── e3ec3d0e9167012df466b6a43f45991e.six │ │ │ │ │ └── e3ec3d0e9167012df466b6a43f45991e.tix │ │ │ │ │ ├── pack-names │ │ │ │ │ ├── packs │ │ │ │ │ └── e3ec3d0e9167012df466b6a43f45991e.pack │ │ │ │ │ └── shared-storage │ │ │ └── index.html │ │ ├── cvs │ │ │ ├── CVS │ │ │ │ ├── Entries │ │ │ │ ├── Repository │ │ │ │ └── Root │ │ │ └── trunk │ │ │ │ ├── CVS │ │ │ │ ├── Entries │ │ │ │ ├── Repository │ │ │ │ └── Root │ │ │ │ └── index.html │ │ ├── git │ │ │ └── index.html │ │ ├── hg │ │ │ ├── .hg │ │ │ │ ├── 00changelog.i │ │ │ │ ├── dirstate │ │ │ │ ├── last-message.txt │ │ │ │ ├── requires │ │ │ │ ├── store │ │ │ │ │ ├── 00changelog.i │ │ │ │ │ ├── 00manifest.i │ │ │ │ │ ├── data │ │ │ │ │ │ └── index.html.i │ │ │ │ │ ├── fncache │ │ │ │ │ └── undo │ │ │ │ ├── undo.bookmarks │ │ │ │ ├── undo.branch │ │ │ │ ├── undo.desc │ │ │ │ └── undo.dirstate │ │ │ └── index.html │ │ ├── index.html │ │ └── svn │ │ │ └── index.html │ ├── spider_man │ │ ├── data_receptor_js.php │ │ ├── index.html │ │ └── javascriptredirect.html │ ├── url_fuzzer.tgz │ ├── url_fuzzer │ │ ├── index.html │ │ ├── index.html.zip │ │ └── index.html~ │ ├── web20Spider │ │ ├── 1.html │ │ ├── 2-2.html │ │ ├── 2.html │ │ ├── 3.html │ │ └── combinedhooks.js │ ├── web_diff │ │ ├── 123.html │ │ ├── 456.html │ │ ├── exclude.php │ │ └── index.html │ ├── web_spider │ │ ├── 1.gz │ │ ├── 2.tgz │ │ ├── a │ │ │ ├── b │ │ │ │ ├── c │ │ │ │ │ ├── d │ │ │ │ │ │ └── index.html │ │ │ │ │ └── index.html │ │ │ │ └── index.html │ │ │ └── index.html │ │ ├── follow_links │ │ │ ├── 1.html │ │ │ ├── 2.html │ │ │ ├── 3.html │ │ │ ├── 4.html │ │ │ ├── a b.html │ │ │ ├── a.gif │ │ │ ├── d f │ │ │ │ └── index.html │ │ │ └── index.html │ │ ├── ignore_regex │ │ │ ├── 1.html │ │ │ ├── 2.html │ │ │ ├── a.html │ │ │ └── index.html │ │ ├── index.html │ │ ├── relativeRegex.html │ │ └── variants │ │ │ ├── article.php │ │ │ └── index.php │ ├── wordnet │ │ ├── azure.html │ │ ├── blue.html │ │ ├── green.html │ │ ├── hide.php │ │ ├── index.html │ │ ├── red.html │ │ └── show.php │ └── wsdl_finder │ │ ├── lib │ │ ├── class.nusoap_base.php │ │ ├── class.soap_fault.php │ │ ├── class.soap_parser.php │ │ ├── class.soap_server.php │ │ ├── class.soap_transport_http.php │ │ ├── class.soap_val.php │ │ ├── class.soapclient.php │ │ ├── class.wsdl.php │ │ ├── class.wsdlcache.php │ │ ├── class.xmlschema.php │ │ ├── nusoap.php │ │ └── nusoapmime.php │ │ ├── samples │ │ ├── client1.php │ │ ├── client2.php │ │ ├── client3.php │ │ ├── getfile1client.php │ │ ├── getfile2client.php │ │ ├── index.html │ │ ├── mimeclient.php │ │ ├── sslclient.php │ │ ├── wsdlclient1.php │ │ ├── wsdlclient10.php │ │ ├── wsdlclient11.php │ │ ├── wsdlclient12.php │ │ ├── wsdlclient13.php │ │ ├── wsdlclient14.php │ │ ├── wsdlclient15.php │ │ ├── wsdlclient2.php │ │ ├── wsdlclient3.php │ │ ├── wsdlclient3b.php │ │ ├── wsdlclient3c.php │ │ ├── wsdlclient4.php │ │ ├── wsdlclient5.php │ │ ├── wsdlclient6.php │ │ ├── wsdlclient7.php │ │ ├── wsdlclient8.php │ │ └── wsdlclient9.php │ │ ├── web_service_client.php │ │ └── web_service_server.php ├── default.css ├── grep │ ├── ajax │ │ ├── ajax_info.txt │ │ └── index.html │ ├── clamav │ │ ├── eicar.com │ │ ├── eicar.com.txt │ │ ├── eicar_com.zip │ │ ├── eicarcom2.zip │ │ ├── index.html │ │ └── not-eicar │ ├── click_jacking │ │ ├── index.php │ │ ├── with_header.php │ │ └── without_protection.php │ ├── code_disclosure │ │ ├── cd.html │ │ ├── index.html │ │ └── not_cd.html │ ├── credit_cards.html │ ├── cross_domain_js │ │ ├── cross_domain_script.html │ │ ├── cross_domain_script_mixed.html │ │ ├── cross_domain_script_with_type.html │ │ ├── index.html │ │ └── local_script.html │ ├── csp │ │ ├── csp_with_error_1.php │ │ ├── csp_with_error_2.php │ │ ├── csp_with_error_3.php │ │ ├── csp_without_error.php │ │ └── index.php │ ├── directory_indexing │ │ └── index.html │ ├── dom_xss │ │ ├── dom_xss_false_positive.html │ │ ├── dom_xss_trivial.html │ │ └── index.html │ ├── error_500 │ │ ├── 500.php │ │ └── index.html │ ├── error_pages │ │ ├── error_page.html │ │ └── index.html │ ├── event_validation │ │ ├── event_validation.html │ │ ├── index.html │ │ └── without_event_validation.html │ ├── feeds.html │ ├── form_autocomplete │ │ ├── index-field-off.html │ │ ├── index-form-default.html │ │ ├── index-form-off-field-on.html │ │ ├── index-form-off-no-pass-on.html │ │ ├── index-form-off.html │ │ ├── index-form-on-field-off.html │ │ ├── index-form-on-field-on.html │ │ ├── index-form-on.html │ │ ├── index-form-two-fields.html │ │ └── index.html │ ├── get_emails │ │ ├── emails.html │ │ └── index.html │ ├── grep_empty │ │ └── index.html │ ├── hash_find │ │ ├── hash.html │ │ ├── index.html │ │ └── no_hash.html │ ├── html_comments │ │ ├── html_in_comment.html │ │ ├── index.html │ │ └── simple_comment.html │ ├── http_in_body │ │ ├── http_request.html │ │ ├── http_response.html │ │ └── index.html │ ├── index.html │ ├── lang │ │ ├── en.html │ │ ├── es.html │ │ └── index.html │ ├── meta_tags │ │ ├── google_sitemap.html │ │ ├── index.html │ │ └── linux_meta.html │ ├── motw │ │ ├── index.html │ │ ├── invalid_MOTW.html │ │ └── valid_MOTW.html │ ├── newline │ │ └── index.html │ ├── objects │ │ ├── applet.html │ │ ├── index.html │ │ └── object.html │ ├── oracle │ │ ├── index.html │ │ └── oracle.html │ ├── password_profiling │ │ ├── error_page.html │ │ └── index.html │ ├── private_ip.html │ ├── ssn │ │ ├── index.html │ │ ├── ssn.html │ │ ├── with_ssn.html │ │ └── without_ssn.html │ ├── strange_headers │ │ ├── index.html │ │ └── strange_header.php │ ├── strange_http_code │ │ ├── index.html │ │ ├── strange_http_code.php │ │ └── strange_http_code_2.php │ ├── strange_parameters │ │ └── index.html │ ├── svn_users │ │ ├── index.html │ │ └── svn_user.html │ └── wsdl_greper │ │ ├── index.html │ │ └── wsdl.html ├── img │ └── w3af_webShell.php ├── index.html ├── infrastructure │ ├── detect_reverse_proxy │ │ └── index.php │ ├── dot_net_errors │ │ ├── index.html │ │ ├── sample.aspx │ │ └── sample~.aspx │ ├── find_vhost │ │ └── internal_domain.html │ └── halberd │ │ └── halberd.php └── mangle │ ├── index.html │ └── sed │ └── index.html ├── writable └── index.html └── ~www └── index.html /.dockerignore: -------------------------------------------------------------------------------- 1 | .git 2 | -------------------------------------------------------------------------------- /apache2config/conf.d/charset: -------------------------------------------------------------------------------- 1 | # Read the documentation before enabling AddDefaultCharset. 2 | # In general, it is only a good idea if you know that all your files 3 | # have this encoding. It will override any encoding given in the files 4 | # in meta http-equiv or xml encoding tags. 5 | 6 | #AddDefaultCharset UTF-8 7 | -------------------------------------------------------------------------------- /apache2config/conf.d/other-vhosts-access-log: -------------------------------------------------------------------------------- 1 | # Define an access log for VirtualHosts that don't define their own logfile 2 | CustomLog ${APACHE_LOG_DIR}/other_vhosts_access.log vhost_combined 3 | -------------------------------------------------------------------------------- /apache2config/httpd.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/apache2config/httpd.conf -------------------------------------------------------------------------------- /apache2config/mods-available/actions.conf: -------------------------------------------------------------------------------- 1 | # a2enmod-note: needs-configuration 2 | 3 | # 4 | # Action lets you define media types that will execute a script whenever 5 | # a matching file is called. This eliminates the need for repeated URL 6 | # pathnames for oft-used CGI file processors. 7 | # Format: Action media/type /cgi-script/location 8 | # Format: Action handler-name /cgi-script/location 9 | # 10 | 11 | -------------------------------------------------------------------------------- /apache2config/mods-available/actions.load: -------------------------------------------------------------------------------- 1 | LoadModule actions_module /usr/lib/apache2/modules/mod_actions.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/alias.load: -------------------------------------------------------------------------------- 1 | LoadModule alias_module /usr/lib/apache2/modules/mod_alias.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/asis.load: -------------------------------------------------------------------------------- 1 | LoadModule asis_module /usr/lib/apache2/modules/mod_asis.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/auth_basic.load: -------------------------------------------------------------------------------- 1 | LoadModule auth_basic_module /usr/lib/apache2/modules/mod_auth_basic.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/auth_digest.load: -------------------------------------------------------------------------------- 1 | LoadModule auth_digest_module /usr/lib/apache2/modules/mod_auth_digest.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_alias.load: -------------------------------------------------------------------------------- 1 | LoadModule authn_alias_module /usr/lib/apache2/modules/mod_authn_alias.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_anon.load: -------------------------------------------------------------------------------- 1 | LoadModule authn_anon_module /usr/lib/apache2/modules/mod_authn_anon.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_dbd.load: -------------------------------------------------------------------------------- 1 | # Depends: dbd 2 | LoadModule authn_dbd_module /usr/lib/apache2/modules/mod_authn_dbd.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_dbm.load: -------------------------------------------------------------------------------- 1 | LoadModule authn_dbm_module /usr/lib/apache2/modules/mod_authn_dbm.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_default.load: -------------------------------------------------------------------------------- 1 | LoadModule authn_default_module /usr/lib/apache2/modules/mod_authn_default.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authn_file.load: -------------------------------------------------------------------------------- 1 | LoadModule authn_file_module /usr/lib/apache2/modules/mod_authn_file.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authnz_ldap.load: -------------------------------------------------------------------------------- 1 | # Depends: ldap 2 | LoadModule authnz_ldap_module /usr/lib/apache2/modules/mod_authnz_ldap.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_dbm.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_dbm_module /usr/lib/apache2/modules/mod_authz_dbm.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_default.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_default_module /usr/lib/apache2/modules/mod_authz_default.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_groupfile.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_groupfile_module /usr/lib/apache2/modules/mod_authz_groupfile.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_host.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_host_module /usr/lib/apache2/modules/mod_authz_host.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_owner.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_owner_module /usr/lib/apache2/modules/mod_authz_owner.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/authz_user.load: -------------------------------------------------------------------------------- 1 | LoadModule authz_user_module /usr/lib/apache2/modules/mod_authz_user.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/autoindex.load: -------------------------------------------------------------------------------- 1 | LoadModule autoindex_module /usr/lib/apache2/modules/mod_autoindex.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/cache.load: -------------------------------------------------------------------------------- 1 | LoadModule cache_module /usr/lib/apache2/modules/mod_cache.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/cern_meta.load: -------------------------------------------------------------------------------- 1 | LoadModule cern_meta_module /usr/lib/apache2/modules/mod_cern_meta.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/cgi.load: -------------------------------------------------------------------------------- 1 | LoadModule cgi_module /usr/lib/apache2/modules/mod_cgi.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/cgid.conf: -------------------------------------------------------------------------------- 1 | # Socket for cgid communication 2 | ScriptSock ${APACHE_RUN_DIR}/cgisock 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/cgid.load: -------------------------------------------------------------------------------- 1 | LoadModule cgid_module /usr/lib/apache2/modules/mod_cgid.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/charset_lite.load: -------------------------------------------------------------------------------- 1 | LoadModule charset_lite_module /usr/lib/apache2/modules/mod_charset_lite.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/dav.load: -------------------------------------------------------------------------------- 1 | LoadModule dav_module /usr/lib/apache2/modules/mod_dav.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/dav_fs.conf: -------------------------------------------------------------------------------- 1 | DAVLockDB ${APACHE_LOCK_DIR}/DAVLock 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/dav_fs.load: -------------------------------------------------------------------------------- 1 | # Depends: dav 2 | LoadModule dav_fs_module /usr/lib/apache2/modules/mod_dav_fs.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/dav_lock.load: -------------------------------------------------------------------------------- 1 | LoadModule dav_lock_module /usr/lib/apache2/modules/mod_dav_lock.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/dbd.load: -------------------------------------------------------------------------------- 1 | LoadModule dbd_module /usr/lib/apache2/modules/mod_dbd.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/deflate.conf: -------------------------------------------------------------------------------- 1 | 2 | # these are known to be safe with MSIE 6 3 | AddOutputFilterByType DEFLATE text/html text/plain text/xml 4 | 5 | # everything else may cause problems with MSIE 6 6 | AddOutputFilterByType DEFLATE text/css 7 | AddOutputFilterByType DEFLATE application/x-javascript application/javascript application/ecmascript 8 | AddOutputFilterByType DEFLATE application/rss+xml 9 | 10 | -------------------------------------------------------------------------------- /apache2config/mods-available/deflate.load: -------------------------------------------------------------------------------- 1 | LoadModule deflate_module /usr/lib/apache2/modules/mod_deflate.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/dir.conf: -------------------------------------------------------------------------------- 1 | 2 | 3 | DirectoryIndex index.html index.cgi index.pl index.php index.xhtml index.htm 4 | 5 | 6 | -------------------------------------------------------------------------------- /apache2config/mods-available/dir.load: -------------------------------------------------------------------------------- 1 | LoadModule dir_module /usr/lib/apache2/modules/mod_dir.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/disk_cache.load: -------------------------------------------------------------------------------- 1 | # Depends: cache 2 | LoadModule disk_cache_module /usr/lib/apache2/modules/mod_disk_cache.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/dump_io.load: -------------------------------------------------------------------------------- 1 | LoadModule dumpio_module /usr/lib/apache2/modules/mod_dumpio.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/env.load: -------------------------------------------------------------------------------- 1 | LoadModule env_module /usr/lib/apache2/modules/mod_env.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/expires.load: -------------------------------------------------------------------------------- 1 | LoadModule expires_module /usr/lib/apache2/modules/mod_expires.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/ext_filter.load: -------------------------------------------------------------------------------- 1 | LoadModule ext_filter_module /usr/lib/apache2/modules/mod_ext_filter.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/file_cache.load: -------------------------------------------------------------------------------- 1 | # Depends: cache 2 | LoadModule file_cache_module /usr/lib/apache2/modules/mod_file_cache.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/filter.load: -------------------------------------------------------------------------------- 1 | LoadModule filter_module /usr/lib/apache2/modules/mod_filter.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/headers.load: -------------------------------------------------------------------------------- 1 | LoadModule headers_module /usr/lib/apache2/modules/mod_headers.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/ident.load: -------------------------------------------------------------------------------- 1 | LoadModule ident_module /usr/lib/apache2/modules/mod_ident.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/imagemap.load: -------------------------------------------------------------------------------- 1 | LoadModule imagemap_module /usr/lib/apache2/modules/mod_imagemap.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/include.load: -------------------------------------------------------------------------------- 1 | LoadModule include_module /usr/lib/apache2/modules/mod_include.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/info.conf: -------------------------------------------------------------------------------- 1 | 2 | # 3 | # Allow remote server configuration reports, with the URL of 4 | # http://servername/server-info (requires that mod_info.c be loaded). 5 | # Uncomment and change the "192.0.2.0/24" to allow access from other hosts. 6 | # 7 | 8 | SetHandler server-info 9 | Order deny,allow 10 | Deny from all 11 | Allow from 127.0.0.1 ::1 12 | # Allow from 192.0.2.0/24 13 | 14 | 15 | 16 | 17 | -------------------------------------------------------------------------------- /apache2config/mods-available/info.load: -------------------------------------------------------------------------------- 1 | LoadModule info_module /usr/lib/apache2/modules/mod_info.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/jk.load: -------------------------------------------------------------------------------- 1 | LoadModule jk_module /usr/lib/apache2/modules/mod_jk.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/ldap.conf: -------------------------------------------------------------------------------- 1 | 2 | SetHandler ldap-status 3 | Order deny,allow 4 | Deny from all 5 | Allow from 127.0.0.1 ::1 6 | # Allow from 192.0.2.0/24 7 | Satisfy all 8 | 9 | -------------------------------------------------------------------------------- /apache2config/mods-available/ldap.load: -------------------------------------------------------------------------------- 1 | LoadModule ldap_module /usr/lib/apache2/modules/mod_ldap.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/log_forensic.load: -------------------------------------------------------------------------------- 1 | LoadModule log_forensic_module /usr/lib/apache2/modules/mod_log_forensic.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/mem_cache.conf: -------------------------------------------------------------------------------- 1 | 2 | CacheEnable mem / 3 | MCacheSize 4096 4 | MCacheMaxObjectCount 100 5 | MCacheMinObjectSize 1 6 | MCacheMaxObjectSize 2048 7 | 8 | -------------------------------------------------------------------------------- /apache2config/mods-available/mem_cache.load: -------------------------------------------------------------------------------- 1 | # Depends: cache 2 | LoadModule mem_cache_module /usr/lib/apache2/modules/mod_mem_cache.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/mime.load: -------------------------------------------------------------------------------- 1 | LoadModule mime_module /usr/lib/apache2/modules/mod_mime.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/mime_magic.conf: -------------------------------------------------------------------------------- 1 | 2 | MIMEMagicFile /etc/apache2/magic 3 | 4 | -------------------------------------------------------------------------------- /apache2config/mods-available/mime_magic.load: -------------------------------------------------------------------------------- 1 | LoadModule mime_magic_module /usr/lib/apache2/modules/mod_mime_magic.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/mod-security.conf: -------------------------------------------------------------------------------- 1 | 2 | # Default Debian dir for modsecurity's persistent data 3 | SecDataDir /var/cache/modsecurity 4 | 5 | # Include all the *.conf files in /etc/modsecurity. 6 | # Keeping your local configuration in that directory 7 | # will allow for an easy upgrade of THIS file and 8 | # make your life easier 9 | Include "/etc/modsecurity/*.conf" 10 | 11 | -------------------------------------------------------------------------------- /apache2config/mods-available/mod-security.load: -------------------------------------------------------------------------------- 1 | LoadFile /usr/lib/x86_64-linux-gnu/libxml2.so.2 2 | LoadModule security2_module /usr/lib/apache2/modules/mod_security2.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/negotiation.load: -------------------------------------------------------------------------------- 1 | LoadModule negotiation_module /usr/lib/apache2/modules/mod_negotiation.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/php5.load: -------------------------------------------------------------------------------- 1 | LoadModule php5_module /usr/lib/apache2/modules/libphp5.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy.load: -------------------------------------------------------------------------------- 1 | LoadModule proxy_module /usr/lib/apache2/modules/mod_proxy.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_ajp.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_ajp_module /usr/lib/apache2/modules/mod_proxy_ajp.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_balancer.conf: -------------------------------------------------------------------------------- 1 | 2 | 3 | # Balancer manager enables dynamic update of balancer members 4 | # (needs mod_status). Uncomment to enable. 5 | # 6 | # 7 | # 8 | # SetHandler balancer-manager 9 | # Order deny,allow 10 | # Deny from all 11 | # Allow from 127.0.0.1 ::1 12 | # Satisfy all 13 | # 14 | # 15 | 16 | 17 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_balancer.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_balancer_module /usr/lib/apache2/modules/mod_proxy_balancer.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_connect.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_connect_module /usr/lib/apache2/modules/mod_proxy_connect.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_ftp.conf: -------------------------------------------------------------------------------- 1 | 2 | 3 | # Define the character set for proxied FTP listings. Default is ISO-8859-1 4 | ProxyFtpDirCharset UTF-8 5 | 6 | 7 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_ftp.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_ftp_module /usr/lib/apache2/modules/mod_proxy_ftp.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_http.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_http_module /usr/lib/apache2/modules/mod_proxy_http.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/proxy_scgi.load: -------------------------------------------------------------------------------- 1 | # Depends: proxy 2 | LoadModule proxy_scgi_module /usr/lib/apache2/modules/mod_proxy_scgi.so 3 | -------------------------------------------------------------------------------- /apache2config/mods-available/python.load: -------------------------------------------------------------------------------- 1 | LoadModule python_module /usr/lib/apache2/modules/mod_python.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/reqtimeout.load: -------------------------------------------------------------------------------- 1 | LoadModule reqtimeout_module /usr/lib/apache2/modules/mod_reqtimeout.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/rewrite.load: -------------------------------------------------------------------------------- 1 | LoadModule rewrite_module /usr/lib/apache2/modules/mod_rewrite.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/setenvif.load: -------------------------------------------------------------------------------- 1 | LoadModule setenvif_module /usr/lib/apache2/modules/mod_setenvif.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/speling.load: -------------------------------------------------------------------------------- 1 | LoadModule speling_module /usr/lib/apache2/modules/mod_speling.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/ssl.load: -------------------------------------------------------------------------------- 1 | LoadModule ssl_module /usr/lib/apache2/modules/mod_ssl.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/status.load: -------------------------------------------------------------------------------- 1 | LoadModule status_module /usr/lib/apache2/modules/mod_status.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/substitute.load: -------------------------------------------------------------------------------- 1 | LoadModule substitute_module /usr/lib/apache2/modules/mod_substitute.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/suexec.load: -------------------------------------------------------------------------------- 1 | LoadModule suexec_module /usr/lib/apache2/modules/mod_suexec.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/unique_id.load: -------------------------------------------------------------------------------- 1 | LoadModule unique_id_module /usr/lib/apache2/modules/mod_unique_id.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/userdir.load: -------------------------------------------------------------------------------- 1 | LoadModule userdir_module /usr/lib/apache2/modules/mod_userdir.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/usertrack.load: -------------------------------------------------------------------------------- 1 | LoadModule usertrack_module /usr/lib/apache2/modules/mod_usertrack.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/version.load: -------------------------------------------------------------------------------- 1 | LoadModule version_module /usr/lib/apache2/modules/mod_version.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-available/vhost_alias.load: -------------------------------------------------------------------------------- 1 | LoadModule vhost_alias_module /usr/lib/apache2/modules/mod_vhost_alias.so 2 | -------------------------------------------------------------------------------- /apache2config/mods-enabled/alias.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/alias.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/alias.load: -------------------------------------------------------------------------------- 1 | ../mods-available/alias.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/auth_basic.load: -------------------------------------------------------------------------------- 1 | ../mods-available/auth_basic.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/authn_file.load: -------------------------------------------------------------------------------- 1 | ../mods-available/authn_file.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/authz_default.load: -------------------------------------------------------------------------------- 1 | ../mods-available/authz_default.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/authz_groupfile.load: -------------------------------------------------------------------------------- 1 | ../mods-available/authz_groupfile.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/authz_host.load: -------------------------------------------------------------------------------- 1 | ../mods-available/authz_host.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/authz_user.load: -------------------------------------------------------------------------------- 1 | ../mods-available/authz_user.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/autoindex.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/autoindex.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/autoindex.load: -------------------------------------------------------------------------------- 1 | ../mods-available/autoindex.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/cgi.load: -------------------------------------------------------------------------------- 1 | ../mods-available/cgi.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/dav.load: -------------------------------------------------------------------------------- 1 | ../mods-available/dav.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/dav_fs.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/dav_fs.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/dav_fs.load: -------------------------------------------------------------------------------- 1 | ../mods-available/dav_fs.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/deflate.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/deflate.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/deflate.load: -------------------------------------------------------------------------------- 1 | ../mods-available/deflate.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/dir.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/dir.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/dir.load: -------------------------------------------------------------------------------- 1 | ../mods-available/dir.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/env.load: -------------------------------------------------------------------------------- 1 | ../mods-available/env.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/include.load: -------------------------------------------------------------------------------- 1 | ../mods-available/include.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/jk.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/jk.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/jk.load: -------------------------------------------------------------------------------- 1 | ../mods-available/jk.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/mime.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/mime.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/mime.load: -------------------------------------------------------------------------------- 1 | ../mods-available/mime.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/mod-security.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/mod-security.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/mod-security.load: -------------------------------------------------------------------------------- 1 | ../mods-available/mod-security.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/negotiation.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/negotiation.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/negotiation.load: -------------------------------------------------------------------------------- 1 | ../mods-available/negotiation.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/php5.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/php5.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/php5.load: -------------------------------------------------------------------------------- 1 | ../mods-available/php5.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/python.load: -------------------------------------------------------------------------------- 1 | ../mods-available/python.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/reqtimeout.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/reqtimeout.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/reqtimeout.load: -------------------------------------------------------------------------------- 1 | ../mods-available/reqtimeout.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/rewrite.load: -------------------------------------------------------------------------------- 1 | ../mods-available/rewrite.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/setenvif.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/setenvif.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/setenvif.load: -------------------------------------------------------------------------------- 1 | ../mods-available/setenvif.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/ssl.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/ssl.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/ssl.load: -------------------------------------------------------------------------------- 1 | ../mods-available/ssl.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/status.conf: -------------------------------------------------------------------------------- 1 | ../mods-available/status.conf -------------------------------------------------------------------------------- /apache2config/mods-enabled/status.load: -------------------------------------------------------------------------------- 1 | ../mods-available/status.load -------------------------------------------------------------------------------- /apache2config/mods-enabled/unique_id.load: -------------------------------------------------------------------------------- 1 | ../mods-available/unique_id.load -------------------------------------------------------------------------------- /apache2config/sites-enabled/intranet: -------------------------------------------------------------------------------- 1 | ../sites-available/intranet -------------------------------------------------------------------------------- /apache2config/sites-enabled/modsecurity: -------------------------------------------------------------------------------- 1 | ../sites-available/modsecurity -------------------------------------------------------------------------------- /apache2config/sites-enabled/moth: -------------------------------------------------------------------------------- 1 | ../sites-available/moth -------------------------------------------------------------------------------- /apache2config/sites-enabled/moth-ssl: -------------------------------------------------------------------------------- 1 | ../sites-available/moth-ssl -------------------------------------------------------------------------------- /apache2config/sites-enabled/wivet: -------------------------------------------------------------------------------- 1 | ../sites-available/wivet -------------------------------------------------------------------------------- /apache2config/sites-enabled/wordpress: -------------------------------------------------------------------------------- 1 | ../sites-available/wordpress -------------------------------------------------------------------------------- /docker/my.cnf: -------------------------------------------------------------------------------- 1 | [mysqld] 2 | bind-address=0.0.0.0 3 | 4 | # http://www.percona.com/blog/2008/05/31/dns-achilles-heel-mysql-installation/ 5 | skip_name_resolve 6 | 7 | #server-id 8 | #log-bin 9 | -------------------------------------------------------------------------------- /docker/mysqld_charset.cnf: -------------------------------------------------------------------------------- 1 | [mysqld] 2 | character_set_server=utf8 3 | character_set_filesystem=utf8 4 | collation-server=utf8_general_ci 5 | init-connect='SET NAMES utf8' 6 | init_connect='SET collation_connection = utf8_general_ci' 7 | skip-character-set-client-handshake 8 | -------------------------------------------------------------------------------- /docker/supervisord.conf: -------------------------------------------------------------------------------- 1 | [supervisord] 2 | nodaemon=true 3 | 4 | [program:sshd] 5 | command=/usr/sbin/sshd -D 6 | 7 | [program:apache2] 8 | command=/bin/bash -c "source /etc/apache2/envvars && exec /usr/sbin/apache2 -D FOREGROUND" 9 | directory=/etc/apache2/ 10 | stderr_logfile=/var/log/apache2/supervisor-apache-stderr.log 11 | stdout_logfile=/var/log/apache2/supervisor-apache-stdout.log 12 | 13 | [program:mysqld] 14 | command=/usr/bin/mysqld_safe 15 | 16 | -------------------------------------------------------------------------------- /webroot/.htaccess: -------------------------------------------------------------------------------- 1 | #Completely useless, just to be found by the apache_htaccess payload. -------------------------------------------------------------------------------- /webroot/intranet/index.html: -------------------------------------------------------------------------------- 1 | i do not exist. 2 | -------------------------------------------------------------------------------- /webroot/moth/clean_unittest_generated_data.sh: -------------------------------------------------------------------------------- 1 | #!/bin/bash 2 | 3 | sudo rm -rf w3af/audit/file_upload/uploads/* 4 | sudo rm -rf w3af/audit/dav/write-all/* 5 | sudo git checkout w3af/audit/ssi/messages.shtml 6 | sudo git checkout w3af/audit/xss/stored/data.txt 7 | sudo chmod 777 w3af/audit/ssi/messages.shtml 8 | sudo chmod 777 w3af/audit/xss/stored/data.txt 9 | 10 | git status 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/crossdomain.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /webroot/moth/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/favicon.ico -------------------------------------------------------------------------------- /webroot/moth/hidden/index.html: -------------------------------------------------------------------------------- 1 | This is super! 2 | -------------------------------------------------------------------------------- /webroot/moth/hidden/super/index.html: -------------------------------------------------------------------------------- 1 | yes it is! 2 | -------------------------------------------------------------------------------- /webroot/moth/icons/readme.txt: -------------------------------------------------------------------------------- 1 | to be found by pykto 2 | -------------------------------------------------------------------------------- /webroot/moth/images/bonsai_tiny_75x75.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/images/bonsai_tiny_75x75.png -------------------------------------------------------------------------------- /webroot/moth/images/w3af.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/images/w3af.png -------------------------------------------------------------------------------- /webroot/moth/invoker/JMXInvokerServlet: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/invoker/JMXInvokerServlet -------------------------------------------------------------------------------- /webroot/moth/mod_sec_log.php: -------------------------------------------------------------------------------- 1 |

Latest mod_security attacks

2 | 3 |
'; 12 | } 13 | 14 | echo $log; 15 | 16 | ?> 17 | -------------------------------------------------------------------------------- /webroot/moth/mod_security: -------------------------------------------------------------------------------- 1 | . -------------------------------------------------------------------------------- /webroot/moth/php-ids: -------------------------------------------------------------------------------- 1 | . -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/build.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 13 | 14 | 15 | 16 | 17 | 18 | 19 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/docs/phpdocumentor/blank.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | Generated Documentation 4 | 5 | 6 | 7 | 8 |

Generated Documentation

9 | Welcome to default!
10 |
11 | This documentation was generated by phpDocumentor v1.4.2
12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/tmp/phpids_log.txt: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/phpids-0.5.4/lib/IDS/tmp/phpids_log.txt -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier.auto.php: -------------------------------------------------------------------------------- 1 | parseCDATA($string); 11 | } 12 | 13 | } 14 | 15 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/AttrDef/URI/Email.php: -------------------------------------------------------------------------------- 1 | 5 | */ 6 | class HTMLPurifier_AttrTransform_ScriptRequired extends HTMLPurifier_AttrTransform 7 | { 8 | public function transform($attr, $config, $context) { 9 | if (!isset($attr['type'])) { 10 | $attr['type'] = 'text/javascript'; 11 | } 12 | return $attr; 13 | } 14 | } 15 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigDef.php: -------------------------------------------------------------------------------- 1 | 8 | This directive can be used to add custom auto-format injectors. 9 | Specify an array of injector names (class name minus the prefix) 10 | or concrete implementations. Injector class must exist. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.DisplayLinkURI.txt: -------------------------------------------------------------------------------- 1 | AutoFormat.DisplayLinkURI 2 | TYPE: bool 3 | VERSION: 3.2.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 |

7 | This directive turns on the in-text display of URIs in <a> tags, and disables 8 | those links. For example, example becomes 9 | example (http://example.com). 10 |

11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.Linkify.txt: -------------------------------------------------------------------------------- 1 | AutoFormat.Linkify 2 | TYPE: bool 3 | VERSION: 2.0.1 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | 7 |

8 | This directive turns on linkification, auto-linking http, ftp and 9 | https URLs. a tags with the href attribute 10 | must be allowed. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.PurifierLinkify.txt: -------------------------------------------------------------------------------- 1 | AutoFormat.PurifierLinkify 2 | TYPE: bool 3 | VERSION: 2.0.1 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | 7 |

8 | Internal auto-formatter that converts configuration directives in 9 | syntax %Namespace.Directive to links. a tags 10 | with the href attribute must be allowed. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormat.txt: -------------------------------------------------------------------------------- 1 | AutoFormat 2 | DESCRIPTION: Configuration for activating auto-formatting functionality (also known as Injectors) 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormatParam.PurifierLinkifyDocURL.txt: -------------------------------------------------------------------------------- 1 | AutoFormatParam.PurifierLinkifyDocURL 2 | TYPE: string 3 | VERSION: 2.0.1 4 | DEFAULT: '#%s' 5 | --DESCRIPTION-- 6 | 7 |

8 | Location of configuration documentation to link to, let %s substitute 9 | into the configuration's namespace and directive names sans the percent 10 | sign. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/AutoFormatParam.txt: -------------------------------------------------------------------------------- 1 | AutoFormatParam 2 | DESCRIPTION: Configuration for customizing auto-formatting functionality 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/CSS.AllowImportant.txt: -------------------------------------------------------------------------------- 1 | CSS.AllowImportant 2 | TYPE: bool 3 | DEFAULT: false 4 | VERSION: 3.1.0 5 | --DESCRIPTION-- 6 | This parameter determines whether or not !important cascade modifiers should 7 | be allowed in user CSS. If false, !important will stripped. 8 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/CSS.DefinitionRev.txt: -------------------------------------------------------------------------------- 1 | CSS.DefinitionRev 2 | TYPE: int 3 | VERSION: 2.0.0 4 | DEFAULT: 1 5 | --DESCRIPTION-- 6 | 7 |

8 | Revision identifier for your custom definition. See 9 | %HTML.DefinitionRev for details. 10 |

11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/CSS.Proprietary.txt: -------------------------------------------------------------------------------- 1 | CSS.Proprietary 2 | TYPE: bool 3 | VERSION: 3.0.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | 7 |

8 | Whether or not to allow safe, proprietary CSS values. 9 |

10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/CSS.txt: -------------------------------------------------------------------------------- 1 | CSS 2 | DESCRIPTION: Configuration regarding allowed CSS. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Cache.SerializerPath.txt: -------------------------------------------------------------------------------- 1 | Cache.SerializerPath 2 | TYPE: string/null 3 | VERSION: 2.0.0 4 | DEFAULT: NULL 5 | --DESCRIPTION-- 6 | 7 |

8 | Absolute path with no trailing slash to store serialized definitions in. 9 | Default is within the 10 | HTML Purifier library inside DefinitionCache/Serializer. This 11 | path must be writable by the webserver. 12 |

13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Cache.txt: -------------------------------------------------------------------------------- 1 | Cache 2 | DESCRIPTION: Configuration for DefinitionCache and related subclasses. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Core.EscapeInvalidTags.txt: -------------------------------------------------------------------------------- 1 | Core.EscapeInvalidTags 2 | TYPE: bool 3 | DEFAULT: false 4 | --DESCRIPTION-- 5 | When true, invalid tags will be written back to the document as plain text. 6 | Otherwise, they are silently dropped. 7 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Core.Language.txt: -------------------------------------------------------------------------------- 1 | Core.Language 2 | TYPE: string 3 | VERSION: 2.0.0 4 | DEFAULT: 'en' 5 | --DESCRIPTION-- 6 | 7 | ISO 639 language code for localizable things in HTML Purifier to use, 8 | which is mainly error reporting. There is currently only an English (en) 9 | translation, so this directive is currently useless. 10 | 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Core.RemoveInvalidImg.txt: -------------------------------------------------------------------------------- 1 | Core.RemoveInvalidImg 2 | TYPE: bool 3 | DEFAULT: true 4 | VERSION: 1.3.0 5 | --DESCRIPTION-- 6 | 7 |

8 | This directive enables pre-emptive URI checking in img 9 | tags, as the attribute validation strategy is not authorized to 10 | remove elements from the document. Revert to pre-1.3.0 behavior by setting to false. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Core.RemoveScriptContents.txt: -------------------------------------------------------------------------------- 1 | Core.RemoveScriptContents 2 | TYPE: bool/null 3 | DEFAULT: NULL 4 | VERSION: 2.0.0 5 | DEPRECATED-VERSION: 2.1.0 6 | DEPRECATED-USE: Core.HiddenElements 7 | --DESCRIPTION-- 8 |

9 | This directive enables HTML Purifier to remove not only script tags 10 | but all of their contents. 11 |

12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Core.txt: -------------------------------------------------------------------------------- 1 | Core 2 | DESCRIPTION: Core features that are always available. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Filter.Custom.txt: -------------------------------------------------------------------------------- 1 | Filter.Custom 2 | TYPE: list 3 | VERSION: 3.1.0 4 | DEFAULT: array() 5 | --DESCRIPTION-- 6 |

7 | This directive can be used to add custom filters; it is nearly the 8 | equivalent of the now deprecated HTMLPurifier->addFilter() 9 | method. Specify an array of concrete implementations. 10 |

11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Filter.YouTube.txt: -------------------------------------------------------------------------------- 1 | Filter.YouTube 2 | TYPE: bool 3 | VERSION: 3.1.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 |

7 | This directive enables YouTube video embedding in HTML Purifier. Check 8 | this document 9 | on embedding videos for more information on what this filter does. 10 |

11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Filter.txt: -------------------------------------------------------------------------------- 1 | Filter 2 | DESCRIPTION: Directives for turning filters on and off, or specifying custom filters. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/FilterParam.txt: -------------------------------------------------------------------------------- 1 | FilterParam 2 | DESCRIPTION: Configuration for filters. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.CustomDoctype.txt: -------------------------------------------------------------------------------- 1 | HTML.CustomDoctype 2 | TYPE: string/null 3 | VERSION: 2.0.1 4 | DEFAULT: NULL 5 | --DESCRIPTION-- 6 | 7 | A custom doctype for power-users who defined there own document 8 | type. This directive only applies when %HTML.Doctype is blank. 9 | 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.Parent.txt: -------------------------------------------------------------------------------- 1 | HTML.Parent 2 | TYPE: string 3 | VERSION: 1.3.0 4 | DEFAULT: 'div' 5 | --DESCRIPTION-- 6 | 7 |

8 | String name of element that HTML fragment passed to library will be 9 | inserted in. An interesting variation would be using span as the 10 | parent element, meaning that only inline tags would be allowed. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.Proprietary.txt: -------------------------------------------------------------------------------- 1 | HTML.Proprietary 2 | TYPE: bool 3 | VERSION: 3.1.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 |

7 | Whether or not to allow proprietary elements and attributes in your 8 | documents, as per HTMLPurifier_HTMLModule_Proprietary. 9 | Warning: This can cause your documents to stop 10 | validating! 11 |

12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.Strict.txt: -------------------------------------------------------------------------------- 1 | HTML.Strict 2 | TYPE: bool 3 | VERSION: 1.3.0 4 | DEFAULT: false 5 | DEPRECATED-VERSION: 1.7.0 6 | DEPRECATED-USE: HTML.Doctype 7 | --DESCRIPTION-- 8 | Determines whether or not to use Transitional (loose) or Strict rulesets. 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.TidyAdd.txt: -------------------------------------------------------------------------------- 1 | HTML.TidyAdd 2 | TYPE: lookup 3 | VERSION: 2.0.0 4 | DEFAULT: array() 5 | --DESCRIPTION-- 6 | 7 | Fixes to add to the default set of Tidy fixes as per your level. 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.TidyRemove.txt: -------------------------------------------------------------------------------- 1 | HTML.TidyRemove 2 | TYPE: lookup 3 | VERSION: 2.0.0 4 | DEFAULT: array() 5 | --DESCRIPTION-- 6 | 7 | Fixes to remove from the default set of Tidy fixes as per your level. 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.Trusted.txt: -------------------------------------------------------------------------------- 1 | HTML.Trusted 2 | TYPE: bool 3 | VERSION: 2.0.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | Indicates whether or not the user input is trusted or not. If the input is 7 | trusted, a more expansive set of allowed tags and attributes will be used. 8 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.XHTML.txt: -------------------------------------------------------------------------------- 1 | HTML.XHTML 2 | TYPE: bool 3 | DEFAULT: true 4 | VERSION: 1.1.0 5 | DEPRECATED-VERSION: 1.7.0 6 | DEPRECATED-USE: HTML.Doctype 7 | --DESCRIPTION-- 8 | Determines whether or not output is XHTML 1.0 or HTML 4.01 flavor. 9 | --ALIASES-- 10 | Core.XHTML 11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/HTML.txt: -------------------------------------------------------------------------------- 1 | HTML 2 | DESCRIPTION: Configuration regarding allowed HTML. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Output.CommentScriptContents.txt: -------------------------------------------------------------------------------- 1 | Output.CommentScriptContents 2 | TYPE: bool 3 | VERSION: 2.0.0 4 | DEFAULT: true 5 | --DESCRIPTION-- 6 | Determines whether or not HTML Purifier should attempt to fix up the 7 | contents of script tags for legacy browsers with comments. 8 | --ALIASES-- 9 | Core.CommentScriptContents 10 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Output.Newline.txt: -------------------------------------------------------------------------------- 1 | Output.Newline 2 | TYPE: string/null 3 | VERSION: 2.0.1 4 | DEFAULT: NULL 5 | --DESCRIPTION-- 6 | 7 |

8 | Newline string to format final output with. If left null, HTML Purifier 9 | will auto-detect the default newline type of the system and use that; 10 | you can manually override it here. Remember, \r\n is Windows, \r 11 | is Mac, and \n is Unix. 12 |

13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Output.txt: -------------------------------------------------------------------------------- 1 | Output 2 | DESCRIPTION: Configuration relating to the generation of (X)HTML. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Test.ForceNoIconv.txt: -------------------------------------------------------------------------------- 1 | Test.ForceNoIconv 2 | TYPE: bool 3 | DEFAULT: false 4 | --DESCRIPTION-- 5 | When set to true, HTMLPurifier_Encoder will act as if iconv does not exist 6 | and use only pure PHP implementations. 7 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/Test.txt: -------------------------------------------------------------------------------- 1 | Test 2 | DESCRIPTION: Developer testing configuration for our unit tests. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.AllowedSchemes.txt: -------------------------------------------------------------------------------- 1 | URI.AllowedSchemes 2 | TYPE: lookup 3 | --DEFAULT-- 4 | array ( 5 | 'http' => true, 6 | 'https' => true, 7 | 'mailto' => true, 8 | 'ftp' => true, 9 | 'nntp' => true, 10 | 'news' => true, 11 | ) 12 | --DESCRIPTION-- 13 | Whitelist that defines the schemes that a URI is allowed to have. This 14 | prevents XSS attacks from using pseudo-schemes like javascript or mocha. 15 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.DefaultScheme.txt: -------------------------------------------------------------------------------- 1 | URI.DefaultScheme 2 | TYPE: string 3 | DEFAULT: 'http' 4 | --DESCRIPTION-- 5 | 6 |

7 | Defines through what scheme the output will be served, in order to 8 | select the proper object validator when no scheme information is present. 9 |

10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.DefinitionID.txt: -------------------------------------------------------------------------------- 1 | URI.DefinitionID 2 | TYPE: string/null 3 | VERSION: 2.1.0 4 | DEFAULT: NULL 5 | --DESCRIPTION-- 6 | 7 |

8 | Unique identifier for a custom-built URI definition. If you want 9 | to add custom URIFilters, you must specify this value. 10 |

11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.DefinitionRev.txt: -------------------------------------------------------------------------------- 1 | URI.DefinitionRev 2 | TYPE: int 3 | VERSION: 2.1.0 4 | DEFAULT: 1 5 | --DESCRIPTION-- 6 | 7 |

8 | Revision identifier for your custom definition. See 9 | %HTML.DefinitionRev for details. 10 |

11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.Disable.txt: -------------------------------------------------------------------------------- 1 | URI.Disable 2 | TYPE: bool 3 | VERSION: 1.3.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | 7 |

8 | Disables all URIs in all forms. Not sure why you'd want to do that 9 | (after all, the Internet's founded on the notion of a hyperlink). 10 |

11 | 12 | --ALIASES-- 13 | Attr.DisableURI 14 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.DisableResources.txt: -------------------------------------------------------------------------------- 1 | URI.DisableResources 2 | TYPE: bool 3 | VERSION: 1.3.0 4 | DEFAULT: false 5 | --DESCRIPTION-- 6 | 7 |

8 | Disables embedding resources, essentially meaning no pictures. You can 9 | still link to them though. See %URI.DisableExternalResources for why 10 | this might be a good idea. 11 |

12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.HostBlacklist.txt: -------------------------------------------------------------------------------- 1 | URI.HostBlacklist 2 | TYPE: list 3 | VERSION: 1.3.0 4 | DEFAULT: array() 5 | --DESCRIPTION-- 6 | List of strings that are forbidden in the host of any URI. Use it to kill 7 | domain names of spam, etc. Note that it will catch anything in the domain, 8 | so moo.com will catch moo.com.example.com. 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.OverrideAllowedSchemes.txt: -------------------------------------------------------------------------------- 1 | URI.OverrideAllowedSchemes 2 | TYPE: bool 3 | DEFAULT: true 4 | --DESCRIPTION-- 5 | If this is set to true (which it is by default), you can override 6 | %URI.AllowedSchemes by simply registering a HTMLPurifier_URIScheme to the 7 | registry. If false, you will also have to update that directive in order 8 | to add more schemes. 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/URI.txt: -------------------------------------------------------------------------------- 1 | URI 2 | DESCRIPTION: Features regarding Uniform Resource Identifiers. 3 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/ConfigSchema/schema/info.ini: -------------------------------------------------------------------------------- 1 | name = "HTML Purifier" 2 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/DefinitionCache/Serializer/README: -------------------------------------------------------------------------------- 1 | This is a dummy file to prevent Git from ignoring this empty directory. 2 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Exception.php: -------------------------------------------------------------------------------- 1 | array( 9 | 'lang' => 'LanguageCode', 10 | ) 11 | ); 12 | } 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/HTMLModule/Tidy/Transitional.php: -------------------------------------------------------------------------------- 1 | array( 9 | 'xml:lang' => 'LanguageCode', 10 | ) 11 | ); 12 | } 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Language/classes/en-x-test.php: -------------------------------------------------------------------------------- 1 | 'HTML Purifier X' 9 | ); 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Language/messages/en-x-testmini.php: -------------------------------------------------------------------------------- 1 | 'HTML Purifier XNone' 10 | ); 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Printer/ConfigForm.css: -------------------------------------------------------------------------------- 1 | 2 | .hp-config {} 3 | 4 | .hp-config tbody th {text-align:right; padding-right:0.5em;} 5 | .hp-config thead, .hp-config .namespace {background:#3C578C; color:#FFF;} 6 | .hp-config .namespace th {text-align:center;} 7 | .hp-config .verbose {display:none;} 8 | .hp-config .controls {text-align:center;} 9 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Printer/ConfigForm.js: -------------------------------------------------------------------------------- 1 | function toggleWriteability(id_of_patient, checked) { 2 | document.getElementById(id_of_patient).disabled = checked; 3 | } -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/Token/Empty.php: -------------------------------------------------------------------------------- 1 | get('EmbeddedURI', true)) return true; 8 | return parent::filter($uri, $config, $context); 9 | } 10 | } 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/phpids-0.5.4/lib/IDS/vendors/htmlpurifier/HTMLPurifier/URIScheme/https.php: -------------------------------------------------------------------------------- 1 | 6 | -------------------------------------------------------------------------------- /webroot/moth/portal/page: -------------------------------------------------------------------------------- 1 | PPE is workingPPE version 1.3.4 is working. 2 | -------------------------------------------------------------------------------- /webroot/moth/python_test/test.py: -------------------------------------------------------------------------------- 1 | import commands 2 | 3 | def index(req, cmd='echo ""' ): 4 | return commands.getoutput( cmd ) 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/robots.txt: -------------------------------------------------------------------------------- 1 | ALLOW: http://moth/w3af/ 2 | #f00! 3 | DISALLOW:http://moth/w3af/audit/ 4 | 5 | allow: /hidden/ 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/setup/README: -------------------------------------------------------------------------------- 1 | mysql -uroot -pmoth 2 | create database w3af_test; 3 | exit 4 | mysql -uroot -pmoth -hlocalhost w3af_test < w3af_test.sql 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/show_source.php: -------------------------------------------------------------------------------- 1 |

PHP Source:

"; 4 | show_source($_SERVER['SCRIPT_FILENAME']); 5 | } 6 | ?> -------------------------------------------------------------------------------- /webroot/moth/sitemap.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | http://moth/hidden/ 6 | 2012-06-25 7 | daily 8 | 0.5 9 | 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/urllist.txt: -------------------------------------------------------------------------------- 1 | http://moth/hidden/ 2 | http://moth/w3af/i-do-not-exist/ 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/LDAP/simple_ldap.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 15 | -- End 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/MX_injection/mxi.php: -------------------------------------------------------------------------------- 1 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/blind_sql_injection/delay_random.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/blind_sql_injection/random.php: -------------------------------------------------------------------------------- 1 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/blind_sql_injection/random_500_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 8 | } 9 | 10 | ?> 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/blind_sql_injection/random_50_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 8 | } 9 | 10 | ?> 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/blind_sql_injection/random_5_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 8 | } 9 | 10 | ?> 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/buffer_overflow/index.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 800 ) 5 | { 6 | # Sorry, I had no time to setup a real buffer overflow 7 | echo "*** stack smashing detected ***:"; 8 | } 9 | else 10 | { 11 | echo $_GET['buf']; 12 | } 13 | 14 | ?> 15 | -- End 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/.htaccess: -------------------------------------------------------------------------------- 1 | Options +ExecCGI 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/buffOverflow.cgi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/buffOverflow.cgi -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/capture: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/capture -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/capture.c: -------------------------------------------------------------------------------- 1 | #include "cgic.h" 2 | 3 | int cgiMain() { 4 | cgiWriteEnvironment("/CHANGE/THIS/PATH/capcgi.dat"); 5 | cgiHeaderContentType("text/html"); 6 | fprintf(cgiOut, "Captured\n"); 7 | fprintf(cgiOut, "

Captured

\n"); 8 | fprintf(cgiOut, "Your form submission was captured for use in\n"); 9 | fprintf(cgiOut, "debugging CGI code.\n"); 10 | return 0; 11 | } 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/capture.cgi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/capture.cgi -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/cgictest.cgi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/cgictest.cgi -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/formatString.cgi: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/formatString.cgi -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cgic/libcgic.a: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/cgic/libcgic.a -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cors/cors_origin_1.php: -------------------------------------------------------------------------------- 1 | 8 | 9 | 10 | HTTP Response code 200 returned.
11 | HTTP response header Access-Control-Allow-Origin set to "http://w3af.sourceforge.net" 12 | 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cors/cors_origin_2.php: -------------------------------------------------------------------------------- 1 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/cors/cors_origin_4.php: -------------------------------------------------------------------------------- 1 | $value){ 9 | if($header == 'Origin'){ 10 | header("Access-Control-Allow-Origin: " . $value); 11 | } 12 | } 13 | ?> 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/README.txt: -------------------------------------------------------------------------------- 1 | This example is different from the others because the CSRF is in an "a" tag. 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/backend.json: -------------------------------------------------------------------------------- 1 | {"123":23,"456":50} -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/countlib.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/footer.php: -------------------------------------------------------------------------------- 1 | 2 | To use the service, you must be over 18 years of age.
3 | Login
4 | Not registered yet? Register now it's free!
5 | 6 |
7 | 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/images/avatar1.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/csrf/link-vote/images/avatar1.png -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/images/avatar2.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/csrf/link-vote/images/avatar2.png -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/images/clean.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/csrf/link-vote/images/clean.png -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/images/green.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/csrf/link-vote/images/green.png -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/images/logo.png: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/csrf/link-vote/images/logo.png -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/link-vote/vote.php: -------------------------------------------------------------------------------- 1 |
"; 6 | include("footer.php"); 7 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/referer-rnd/buy.php: -------------------------------------------------------------------------------- 1 | '; 5 | ?> 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/referer-rnd/index.php: -------------------------------------------------------------------------------- 1 | '; 5 | ?> 6 | 7 |
8 |

9 | Symbol:
10 | Shares:
11 |

12 | 13 |
14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/referer/buy.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/referer/index.php: -------------------------------------------------------------------------------- 1 |
2 |

3 | Symbol:
4 | Shares:
5 |

6 | 7 |
8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/referer_lib.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/vulnerable-rnd/buy.php: -------------------------------------------------------------------------------- 1 | '; 5 | ?> 6 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/vulnerable-rnd/index.php: -------------------------------------------------------------------------------- 1 | '; 5 | session_start(); 6 | ?> 7 |
8 |

9 | Symbol:
10 | Shares:
11 |

12 | 13 |
14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/vulnerable-token-ignored/buy.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/vulnerable/buy.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/csrf/vulnerable/index.php: -------------------------------------------------------------------------------- 1 | 2 |
3 |

4 | Symbol:
5 | Shares:
6 |

7 | 8 |
9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/dav/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/dav/.gitignore -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/dav/no-privileges/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/dav/no-privileges/.gitignore -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/dav/write-all/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/dav/write-all/.gitignore -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/eval/.htaccess: -------------------------------------------------------------------------------- 1 | Options +ExecCGI 2 | AddHandler cgi-script cgi pl py 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/eval/eval-blind.php: -------------------------------------------------------------------------------- 1 | The information inside the "c" query string parameter, which in this case is:
2 |     -
3 |
4 | Is being evaluated. 5 | 6 | 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/eval/eval.php: -------------------------------------------------------------------------------- 1 | The information inside the "c" query string parameter, which in this case is:
2 |     -
3 |
4 | Is being evaluated. 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/eval/exec.py: -------------------------------------------------------------------------------- 1 | #!/usr/bin/env python 2 | 3 | import cgi 4 | 5 | inputs = cgi.FieldStorage() 6 | 7 | c = "" 8 | 9 | if inputs.has_key('c'): 10 | c = inputs['c'].value 11 | 12 | print "Content-type: text/html\r\n\r\n" 13 | print "The information inside the \"c\" query string parameter, which in this case is:
" 14 | print "    - " + c + "

Is being evaluated." 15 | exec c 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/file_upload/index.html: -------------------------------------------------------------------------------- 1 |
2 | 3 | Choose a file to upload:
4 | 5 |
-------------------------------------------------------------------------------- /webroot/moth/w3af/audit/file_upload/uploads/.gitignore: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/file_upload/uploads/.gitignore -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/302-filtered.php: -------------------------------------------------------------------------------- 1 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/302.php: -------------------------------------------------------------------------------- 1 | 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/java.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | f00ness! 4 | 5 | 10 | 11 | Something 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/meta.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | You're being redirected in 3 seconds, please wait... 4 | 5 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/refresh-header.php: -------------------------------------------------------------------------------- 1 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/global_redirect/test-xss.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 10 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/hpp/footer.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/hpp/header.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | HTTP Parameter Pollution Demo 6 | 7 | 8 | 9 | 10 |
11 |

HTTP Parameter Pollution Demo

12 |
13 | 14 |
15 | 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/hpp/index.php: -------------------------------------------------------------------------------- 1 | 4 | Vote for our president! 5 | 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/htaccess_methods/restricted/index.php: -------------------------------------------------------------------------------- 1 | ABC 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/false_positive.php: -------------------------------------------------------------------------------- 1 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/includes/index.html: -------------------------------------------------------------------------------- 1 | Simple file to include. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/index2.html: -------------------------------------------------------------------------------- 1 | who are you ? 2 | 3 | why are you looking at my path ? 4 | 5 | /home/dz0/w3af/extras/testEnv/webroot/localFileInclusion 6 | 7 | http://localhost/w3af/localFileInclusion/vulnerable.php?file=asf -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/lfi_1.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | 8 | 9 | -- End 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/lfi_2.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | 8 | 9 | -- End 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_inclusion/trivial_lfi.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | 8 | 9 | -- End 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_read/local_file_read.php: -------------------------------------------------------------------------------- 1 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/local_file_read/section.txt: -------------------------------------------------------------------------------- 1 | Showing the section content. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/blind_osc.php: -------------------------------------------------------------------------------- 1 | Start-- 2 | 7 | --End 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/param_osc.php: -------------------------------------------------------------------------------- 1 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/passthru.php: -------------------------------------------------------------------------------- 1 | Start-- 2 | 7 | --End 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/simple_osc.php: -------------------------------------------------------------------------------- 1 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/vulnerable.php: -------------------------------------------------------------------------------- 1 | Start-- 2 | 7 | --End 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/os_commanding/vulnerable2.php: -------------------------------------------------------------------------------- 1 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/phishing_vector/frame_phishing.php: -------------------------------------------------------------------------------- 1 | '; 4 | echo '' 5 | 6 | ?> 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/phishing_vector/http_blacklist_phishing.php: -------------------------------------------------------------------------------- 1 | '; 4 | echo '' 5 | 6 | ?> 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/phishing_vector/iframe_phishing.php: -------------------------------------------------------------------------------- 1 | '; 4 | echo '' 5 | 6 | ?> 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/preg_replace/preg_all_regex.php: -------------------------------------------------------------------------------- 1 | 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/preg_replace/preg_section_regex.php: -------------------------------------------------------------------------------- 1 | $1'; 5 | echo preg_replace($pattern, $replacement, $string); 6 | ?> 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/response_splitting/response_splitting.asp: -------------------------------------------------------------------------------- 1 | <% 2 | Response.AddHeader "testing", Request.QueryString("testing") 3 | Response.Write "This is a simple rs test" 4 | %> 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/response_splitting/response_splitting.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/response_splitting/response_splitting_err.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/rfi/section.php: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/rfi/toBeIncluded.txt: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/rfi/vulnerable.php: -------------------------------------------------------------------------------- 1 | Start-- 2 | 5 | --End 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/sql_injection/sql_injection_false_positive.php: -------------------------------------------------------------------------------- 1 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/ssi/date.shtml: -------------------------------------------------------------------------------- 1 | 2 | 3 | SSI Test Page 4 | 5 | 6 | 7 | 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/ssi/messages.shtml: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/audit/ssi/messages.shtml -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/ssi/ssi-lfr.php: -------------------------------------------------------------------------------- 1 | 2 | ' . $_GET['message'] . "\n"); 7 | 8 | fclose($fp); 9 | ?> 10 | Thanks for leaving your message! Please click here to view all messages. 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/ssi/view-messages.shtml: -------------------------------------------------------------------------------- 1 | 2 | This is the message list: 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-attr-double.php: -------------------------------------------------------------------------------- 1 | >> ', generateRandStr(50), '

'; 5 | 6 | if (array_key_exists('input', $_REQUEST)) { 7 | $input = $_REQUEST["input"]; 8 | printQueryResult('/articles/article[@id="'. $input .'"]/title'); 9 | } 10 | 11 | echo '

'; echo 'FOOTER>>> ', generateRandStr(60); 12 | ?> 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-attr-single.php: -------------------------------------------------------------------------------- 1 | >> ', generateRandStr(50), '

'; 5 | 6 | if (array_key_exists('input', $_REQUEST)) { 7 | $input = $_REQUEST["input"]; 8 | printQueryResult("/articles/article[@id='". $input ."']/title"); 9 | } 10 | 11 | echo '

'; echo 'FOOTER>>> ', generateRandStr(60); 12 | 13 | 14 | ?> 15 | 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-echo.php: -------------------------------------------------------------------------------- 1 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-empty.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-or.php: -------------------------------------------------------------------------------- 1 | >> ', generateRandStr(50), '

'; 5 | 6 | if (array_key_exists('input', $_REQUEST)) { 7 | $input = $_REQUEST["input"]; 8 | printQueryResult("/articles/article/tags[tag='php' or tag='". $input ."']/../title"); 9 | } 10 | 11 | echo '

'; echo 'FOOTER>>> ', generateRandStr(60); 12 | ?> 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-random500.php: -------------------------------------------------------------------------------- 1 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath-tag.php: -------------------------------------------------------------------------------- 1 | >> ', generateRandStr(50), '

'; 5 | 6 | if (array_key_exists('input', $_REQUEST)) { 7 | $input = $_REQUEST["input"]; 8 | printQueryResult("/articles/article/" . $input); 9 | } 10 | 11 | echo '

'; echo 'FOOTER>>> ', generateRandStr(60); 12 | ?> 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xpath/xpath.xml: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | 5 | moth 6 | vulnerability 7 | 8 | XPATH Vulnerability demo 9 |
10 |
11 | 12 | foo 13 | bar 14 | 15 | Spam Eggs 16 |
17 | 18 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/.htaccess: -------------------------------------------------------------------------------- 1 | 2 | RewriteEngine On 3 | RewriteRule ^/sc$ /shortcut.php 4 | RewriteRule ^/abc-(.*?)-def$ /shortcut.php [L] 5 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/302/302.php: -------------------------------------------------------------------------------- 1 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/302/printer.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | "; 10 | }*/ 11 | echo $_SERVER['QUERY_STRING'] . "
"; 12 | echo '::::: ' . $_GET['added'] . "
"; 13 | echo '::::: ' . $_GET['a']; 14 | echo '::::: ' . $_GET['x']; 15 | ?> 16 | 17 | 18 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/data_receptor.php: -------------------------------------------------------------------------------- 1 | 2 | Start-- 3 | '; 5 | echo $_POST['firstname']; 6 | echo '
'; 7 | echo 'Test GET:' . $_GET['firstname']; 8 | echo '
'; 9 | 10 | ?> 11 | --End 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/data_receptor2.php: -------------------------------------------------------------------------------- 1 | 2 | Start-- 3 | '; 5 | echo 'Empresa:' . $_POST['empresa'] . '
'; 6 | echo 'Nombre:' . htmlspecialchars($_POST['firstname']); 7 | echo '
'; 8 | ?> 9 | --End 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/data_receptor3.php: -------------------------------------------------------------------------------- 1 | 2 | Start-- 3 | '; 8 | echo $_POST['user']; 9 | echo '
'; 10 | } 11 | 12 | ?> 13 | --End 14 | 15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/no_tag_xss.php: -------------------------------------------------------------------------------- 1 | Read HTML source code. 2 |
3 | '; 7 | } 8 | 9 | ?> 10 |
11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/repeated_params/index.php: -------------------------------------------------------------------------------- 1 | All but first are vulnerable to XSS
2 | All vulnerable to XSS
3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/repeated_params/qs_repeat.php: -------------------------------------------------------------------------------- 1 | 1) { 10 | if ( $i>0 ){ 11 | echo($param[0].':'.urldecode($param[1])); 12 | }else{ 13 | echo($param[0].':'.$param[1]); 14 | } 15 | } 16 | $i++; 17 | } 18 | 19 | ?> 20 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/repeated_params/qs_repeat_all.php: -------------------------------------------------------------------------------- 1 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/simple_xss.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | Start-- 4 | 9 | --End 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/simple_xss_no_js.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | Start-- 4 | 10 | --End 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/simple_xss_no_quotes.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | Start-- 4 | 11 | --End 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/simple_xss_no_script.php: -------------------------------------------------------------------------------- 1 | 2 | link 3 | Start-- 4 | 10 | --End 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/simple_xss_no_script_2.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | Start-- 4 | 10 | --End 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/stored/index.html: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/stored/reader.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | "; 11 | } 12 | 13 | fclose($fp); 14 | 15 | ?> 16 | 17 | -- End 18 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/stored/writer.php: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | 13 | 14 | -- End 15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/xss_filter_4.php: -------------------------------------------------------------------------------- 1 | ',"'",'"',')','('), array('<','>',''','"',')','('), $input_str ); 5 | $return_str = str_ireplace( '%3Cscript', '', $return_str ); 6 | return $return_str; 7 | } 8 | 9 | echo xss_cleaner($_GET['text']); 10 | ?> 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/xss_filter_5.php: -------------------------------------------------------------------------------- 1 | ',"'",'"',')','('), array('<','>',''','"',')','('), $input_str ); 5 | $return_str = str_ireplace( '%3Cscript', '', $return_str ); 6 | return $return_str; 7 | } 8 | 9 | echo ''; 10 | ?> 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/xss_filter_6.php: -------------------------------------------------------------------------------- 1 | 5 | xss_clean($_GET['text']); 10 | 11 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/xss_with_safe_csp.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xss/xss_with_weak_csp.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xxe/test.xml: -------------------------------------------------------------------------------- 1 | 2 | 4 | ]>&xxe; 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/audit/xxe/xxe-basic.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/auth/detailed/index.php: -------------------------------------------------------------------------------- 1 | 10 | 11 | 12 | 13 | Target 14 | 15 | 16 |

Target

17 |

Hello, guest! You need to login

18 | 19 | 20 | -------------------------------------------------------------------------------- /webroot/moth/w3af/auth/generic/index.php: -------------------------------------------------------------------------------- 1 | 10 | 11 | 12 | 13 | Target 14 | 15 | 16 |

Target

17 |

Hello, guest! You need to login

18 | 19 | 20 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/easy_guess/.htpasswd: -------------------------------------------------------------------------------- 1 | f00:TMA35Mz3Evyu6 2 | admin:eCt9EjHaMjbek 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/easy_guess/abc/index.html: -------------------------------------------------------------------------------- 1 | something! 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/easy_guess/abc/index2.html: -------------------------------------------------------------------------------- 1 | i'm empty, i'm #2 -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/easy_guess/abc/index3.html: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/easy_guess/index.html: -------------------------------------------------------------------------------- 1 | you found the money ! 2 | 3 | something inside the secure path -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/basic_auth/impossible_guess/.htpasswd: -------------------------------------------------------------------------------- 1 | f00:TMA35Mz3Evyu6 2 | admin:eCt9EjHaMjbej 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/easy_guess/.htpasswd: -------------------------------------------------------------------------------- 1 | admin:moth authentication - digest:9b7d5775dd3968bb986c9dffd2b438fb 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/easy_guess/abc/index.html: -------------------------------------------------------------------------------- 1 | something! 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/easy_guess/abc/index2.html: -------------------------------------------------------------------------------- 1 | i'm empty, i'm #2 -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/easy_guess/abc/index3.html: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/easy_guess/index.html: -------------------------------------------------------------------------------- 1 | you found the money ! 2 | 3 | something inside the secure path -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/digest_auth/impossible_guess/.htpasswd: -------------------------------------------------------------------------------- 1 | admin:moth authentication - digest:9b7d5775dd3968bb986c9dffd2b438fb 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/form_login/hidden-section.html: -------------------------------------------------------------------------------- 1 | This is the hidden world of the admin! 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/form_login/impossible_login.php: -------------------------------------------------------------------------------- 1 | Invalid username and password, please try again. -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/form_login/only-password.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 6 | 7 | 8 | 9 |
10 | Password:
11 | 12 |
13 | 14 | 15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/bruteforce/form_login/only-users.php: -------------------------------------------------------------------------------- 1 | Hidden section!'; 5 | } 6 | 7 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/core/404/exists.html: -------------------------------------------------------------------------------- 1 | I exist. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/404/simple_test.html: -------------------------------------------------------------------------------- 1 | 2 | Exists
3 | Doesnt exist
4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_empty.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_empty_html.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_500_lines.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_500_lines_static.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_50_lines.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_50_lines_static.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_5_lines.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/delay_random_5_lines_static.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/empty.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/base_false_positive/empty.php -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/empty_html.php: -------------------------------------------------------------------------------- 1 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/footer.php: -------------------------------------------------------------------------------- 1 | 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/header.php: -------------------------------------------------------------------------------- 1 | 2 |
3 | Test script 4 |
5 | 6 | 7 | 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/php_error.php: -------------------------------------------------------------------------------- 1 | Fatal error: Allowed memory size of 16777216 bytes exhausted (tried to allocate 8192 bytes) in php_error.php on line 1
"; 4 | include('footer.php'); 5 | ?> 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/php_error_2.php: -------------------------------------------------------------------------------- 1 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random.php: -------------------------------------------------------------------------------- 1 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_1_byte.php: -------------------------------------------------------------------------------- 1 | 5 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_500_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 9 | } 10 | 11 | include('footer.php'); 12 | 13 | ?> 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_500_lines_static.php: -------------------------------------------------------------------------------- 1 | \n"; 11 | } 12 | include('footer.php'); 13 | 14 | ?> 15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_50_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 9 | } 10 | include('footer.php'); 11 | ?> 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_50_lines_static.php: -------------------------------------------------------------------------------- 1 | \n"; 16 | } 17 | include('footer.php'); 18 | ?> 19 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_5_lines.php: -------------------------------------------------------------------------------- 1 | \n"; 8 | } 9 | include('footer.php'); 10 | ?> 11 | 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/base_false_positive/random_5_lines_static.php: -------------------------------------------------------------------------------- 1 | \n"; 10 | } 11 | include('footer.php'); 12 | ?> 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/code_coverage/coverage.php: -------------------------------------------------------------------------------- 1 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/cookieFuzzing/cf.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/cookie_handler/has-cookie.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/cookie_handler/set-cookie.php: -------------------------------------------------------------------------------- 1 | 7 | Your browser has a cookie now. 8 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/echo/post.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/index.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/encoding/euc-jp/index.php -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/jap1.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/jap2.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/vúlnerable.php: -------------------------------------------------------------------------------- 1 | asdljasndlansdlaknsdlaknsd 2 | 10 | 11 | asdajlsdkjalsdkj 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/é.html: -------------------------------------------------------------------------------- 1 | Not a 404. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/euc-jp/ファイルの.html: -------------------------------------------------------------------------------- 1 | NOT A 404 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/spaces/foo.html: -------------------------------------------------------------------------------- 1 | Not empty. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/spaces/queryxpath.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/spaces/start end.html: -------------------------------------------------------------------------------- 1 | Not empty. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/utf-8/vúlnerable.php: -------------------------------------------------------------------------------- 1 |
'; 5 | 6 | system ($_GET[command]); 7 | 8 | echo '

END-END-END'; 9 | 10 | ?> 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/utf-8/é.html: -------------------------------------------------------------------------------- 1 | Not a 404. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/utf-8/改.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/encoding/utf-8/改.php -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/windows-1255/heb1.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/windows-1255/heb2.php: -------------------------------------------------------------------------------- 1 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/windows-1255/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/encoding/windows-1255/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/core/encoding/windows-1255/קובץ.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | ולהכיר טוב יותר את המוסכמות, האופי ודרך השימוש באתר. 7 | 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/flash/login.swf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/flash/login.swf -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzFileContent/index.html: -------------------------------------------------------------------------------- 1 | 2 |
3 | 4 | Choose a file to upload:
5 | 6 |
-------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzFileContent/uploader.php: -------------------------------------------------------------------------------- 1 | 11 | 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzFileName/.htaccess: -------------------------------------------------------------------------------- 1 | Options +FollowSymLinks 2 | RewriteEngine on 3 | Rewriterule ^test/(.*)\.html$ f00.php?var=$1 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzFileName/f00.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzURLParts/.htaccess: -------------------------------------------------------------------------------- 1 | Options -MultiViews 2 | RewriteEngine on 3 | RewriteBase /w3af/core/fuzzURLParts/ 4 | RewriteRule ^article/([^\/]+)$ news.php?id=$1 [L] 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzURLParts/index.php: -------------------------------------------------------------------------------- 1 | 6 | 7 | 8 | 9 | News 10 | 11 | 12 |

News

13 |

Hello, guest! You need to read news

14 | 15 | 16 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzURLParts/news.db: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/fuzzURLParts/news.db -------------------------------------------------------------------------------- /webroot/moth/w3af/core/fuzzURLParts/news.php: -------------------------------------------------------------------------------- 1 | 8 | 9 | 10 | 11 | 12 | News 13 | 14 | 15 |

News for

16 |

17 | 18 |

19 | 20 | 21 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/header_fuzzing/cookie_echo.php: -------------------------------------------------------------------------------- 1 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/header_fuzzing/index.php: -------------------------------------------------------------------------------- 1 | '; 4 | echo 'Your browser is: ' . htmlentities($_SERVER['HTTP_USER_AGENT']) . "
"; 5 | 6 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/input_out_of_form_1.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | First name: 5 | 6 |
7 |
8 | 9 | Last name: 10 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/input_out_of_form_2.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | Last name: 4 | 5 | 6 |
7 | First name: 8 | 9 |
10 |
11 | 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/input_out_of_form_3.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | First name: 5 | 6 |
7 | Last name: 8 | 9 |
10 | 11 |
12 | First name: 13 | 14 |
15 |
16 | Last name: 17 | 18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login.html -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/bg_encabe.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/bg_encabe.jpg -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/logo_cenco.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/logo_cenco.jpg -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/logo_easy.jpg: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/logo_easy.jpg -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/pie_bg_ctro.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/pie_bg_ctro.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/pie_esquina_der.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/pie_esquina_der.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/pie_esquina_izq.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/pie_esquina_izq.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/solapa_der.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/solapa_der.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/login_files/solapa_izq.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/login_files/solapa_izq.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/simple_form.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | First name: 5 | 6 |
7 | Last name: 8 | 9 |
10 | 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/textarea.html: -------------------------------------------------------------------------------- 1 | 2 |
3 | 5 |
6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/textarea_out_of_form_1.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | First name: 5 | 6 |
7 |
8 | 9 | Last name: 10 | 11 | 12 | 13 | 14 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/textarea_out_of_form_2.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | Last name: 4 | 5 | 6 |
7 | First name: 8 | 9 |
10 |
11 | 12 | 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/two_simple_forms.html: -------------------------------------------------------------------------------- 1 | 2 | 3 |
4 | First name: 5 | 6 |
7 | Last name: 8 | 9 |
10 | 11 |
12 | First name: 13 | 14 |
15 | Last name: 16 | 17 |
18 | 19 | 20 | 21 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/urlRegex.html: -------------------------------------------------------------------------------- 1 | 6 | 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/htmlParser/urlRegexWorked.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/htmlParser/urlRegexWorked.html -------------------------------------------------------------------------------- /webroot/moth/w3af/core/maxFileSize/maxFileSize.tgz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/maxFileSize/maxFileSize.tgz -------------------------------------------------------------------------------- /webroot/moth/w3af/core/mod404error/.htaccess: -------------------------------------------------------------------------------- 1 | ErrorDocument 404 http://localhost/w3af/mod404error/error.html 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/mod404error/README: -------------------------------------------------------------------------------- 1 | see .htaccess 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/mod404error/error.php: -------------------------------------------------------------------------------- 1 | 4 | 5 | 6 | 0 ) 9 | { 10 | echo 'foo! modified error response only shown if you wanted to visit a php page'; 11 | } 12 | else 13 | { 14 | echo 'this is something completely different'; 15 | } 16 | ?> 17 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/pdfParser/1.pdf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/core/pdfParser/1.pdf -------------------------------------------------------------------------------- /webroot/moth/w3af/core/pdfParser/pepe!.html: -------------------------------------------------------------------------------- 1 | pepeeeeeeeeeeEEEEEE! -------------------------------------------------------------------------------- /webroot/moth/w3af/core/strange-html/s4.html: -------------------------------------------------------------------------------- 1 | doxygen -------------------------------------------------------------------------------- /webroot/moth/w3af/core/time_analysis/analyze.php: -------------------------------------------------------------------------------- 1 | 1 ) 4 | { 5 | 6 | sleep( 4 ); 7 | 8 | } 9 | 10 | ?> 11 | 12 | < delay! > -------------------------------------------------------------------------------- /webroot/moth/w3af/core/unicode_header/index.php: -------------------------------------------------------------------------------- 1 | 7 | 8 | Look at the headers! 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/core/wml_parser/link.wml: -------------------------------------------------------------------------------- 1 | 2 | 4 | 5 | 6 | 7 | 8 |

9 | Next page 10 | 11 | 12 | 13 | 14 |

15 | 16 | 17 | 18 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxContact/ajaxContact.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxContact/ajaxContact.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxContact/img/loading.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxContact/img/loading.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/ajaxdomainsearch1.1.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/ajaxdomainsearch1.1.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/favicon.ico: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/favicon.ico -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/ajax-logo-2.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/ajax-logo-2.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/loading.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/loading.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/logo.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/logo.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/strip.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/ajax/ajaxdomainsearch/images/strip.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/backdoors/cmd.php: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/backdoors/cmd.php -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/backdoors/f00.html: -------------------------------------------------------------------------------- 1 | i'm not a backdoor, please do not kill me. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/content_negotiation/backup.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/content_negotiation/backup.gz -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/content_negotiation/backup.php: -------------------------------------------------------------------------------- 1 | This is just a placeholder. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/content_negotiation/backup.tar: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/content_negotiation/backup.tar -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/content_negotiation/backup.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/content_negotiation/backup.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/index-2-1.html: -------------------------------------------------------------------------------- 1 | ohhh this is haaaaaard! 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/index-3-1.html: -------------------------------------------------------------------------------- 1 | maybe ?! 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/index1.html: -------------------------------------------------------------------------------- 1 | linked 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/index1.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | Start-- 5 | 6 |
7 | 8 | 13 | Welcome to the sales section, we hope that you are a potential client! Please buy. 14 | 20 | Welcome mister provider, please click here to login. 21 | 25 |
26 | 27 | --End 28 | 29 | 30 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/index2.html: -------------------------------------------------------------------------------- 1 | not linked, discovered by digitSum 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/digit_sum/login.php: -------------------------------------------------------------------------------- 1 | Not a 404. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dir_file_bruter/iamhidden.txt: -------------------------------------------------------------------------------- 1 | Hidden file, not linked. Found by bruteforce. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dir_file_bruter/index.html: -------------------------------------------------------------------------------- 1 | 2 | An index to hide the real directory contents and avoid directory indexing. 3 | The directory should look like: 4 | 
 5 | 	+ spameggs
 6 |          \---+ portal
 7 |              \---- andres
 8 |         + test
 9 | 
10 |
11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dir_file_bruter/spameggs/portal/andres/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/dir_file_bruter/spameggs/portal/andres/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dir_file_bruter/test/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/dir_file_bruter/test/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dot_listing/.listing: -------------------------------------------------------------------------------- 1 | drwxr-xr-x 2 andresr w3af 4096 May 11 18:11 . 2 | drwxr-xr-x 9 andresr w3af 4096 Jul 1 01:03 .. 3 | -rw-r--r-- 1 andresr w3af 8139 Apr 12 13:23 hidden.txt 4 | -rw-r--r-- 1 andresr w3af 17205 Apr 12 13:23 404.jpg 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dot_listing/hidden.txt: -------------------------------------------------------------------------------- 1 | Find me please! 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/dot_listing/index.html: -------------------------------------------------------------------------------- 1 | This index hides the real content in this directory: .listing and hidden.txt 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_backdoor/c99shell.php: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | 7 | This site was hacked by Dark Zhad0w! 8 | 9 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/elephant.ttf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_captcha/elephant.ttf -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/images/audio_icon.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_captcha/images/audio_icon.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/images/refresh.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_captcha/images/refresh.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/securimage_example.php: -------------------------------------------------------------------------------- 1 | Out of the box example of Securimage CAPTCHA Class.

2 | 3 | 4 | (Audio)

5 | 6 | Reload Image 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/securimage_play.php: -------------------------------------------------------------------------------- 1 | getAudibleCode(); 14 | exit; 15 | 16 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_captcha/securimage_show.php: -------------------------------------------------------------------------------- 1 | show(); // alternate use: $img->show('/path/to/background.jpg'); 8 | 9 | ?> 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/README: -------------------------------------------------------------------------------- 1 | This is a Bazaar control directory. 2 | Do not change any files in this directory. 3 | See http://bazaar.canonical.com/ for more information about Bazaar. 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch-format: -------------------------------------------------------------------------------- 1 | Bazaar-NG meta directory, format 1 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/branch.conf: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/branch.conf -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/format: -------------------------------------------------------------------------------- 1 | Bazaar Branch Format 7 (needs bzr 1.6) 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/last-revision: -------------------------------------------------------------------------------- 1 | 1 andres.riancho@gmail.com-20121030205528-5ywpwphr5mqcgb2u 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/tags: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/branch/tags -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/checkout/conflicts: -------------------------------------------------------------------------------- 1 | BZR conflict list format 1 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/checkout/format: -------------------------------------------------------------------------------- 1 | Bazaar Working Tree Format 6 (bzr 1.14) 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/checkout/views: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/checkout/views -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/format: -------------------------------------------------------------------------------- 1 | Bazaar repository format 2a (needs bzr 1.16 or later) 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.cix: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.cix -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.iix: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.iix -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.rix: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.rix -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.six: -------------------------------------------------------------------------------- 1 | B+Tree Graph Index 2 2 | node_ref_lists=0 3 | key_elements=1 4 | len=0 5 | row_lengths= 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.tix: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/indices/e3ec3d0e9167012df466b6a43f45991e.tix -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/pack-names: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/pack-names -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/packs/e3ec3d0e9167012df466b6a43f45991e.pack: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/packs/e3ec3d0e9167012df466b6a43f45991e.pack -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/shared-storage: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/bzr/.bzr/repository/shared-storage -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/bzr/index.html: -------------------------------------------------------------------------------- 1 | This is just a test. File was added to bazaar repo. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/CVS/Entries: -------------------------------------------------------------------------------- 1 | D/trunk//// 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/CVS/Repository: -------------------------------------------------------------------------------- 1 | trunk 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/CVS/Root: -------------------------------------------------------------------------------- 1 | /var/www/moth/w3af/crawl/find_dvcs/cvs-root 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/trunk/CVS/Entries: -------------------------------------------------------------------------------- 1 | /index.html/1.1.1.1/Wed Oct 31 18:47:07 2012// 2 | D 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/trunk/CVS/Repository: -------------------------------------------------------------------------------- 1 | trunk/trunk 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/trunk/CVS/Root: -------------------------------------------------------------------------------- 1 | /var/www/moth/w3af/crawl/find_dvcs/cvs-root 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/cvs/trunk/index.html: -------------------------------------------------------------------------------- 1 | This is just a test. File was added to CVS repo. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/git/index.html: -------------------------------------------------------------------------------- 1 | This is just a test. File was added to git repo. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/00changelog.i: -------------------------------------------------------------------------------- 1 |  dummy changelog to prevent using the old repo layout -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/dirstate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/dirstate -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/last-message.txt: -------------------------------------------------------------------------------- 1 | Adding new file. 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/requires: -------------------------------------------------------------------------------- 1 | revlogv1 2 | fncache 3 | store 4 | dotencode 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/00changelog.i: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/00changelog.i -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/00manifest.i: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/00manifest.i -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/data/index.html.i: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/data/index.html.i -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/fncache: -------------------------------------------------------------------------------- 1 | data/index.html.i 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/store/undo: -------------------------------------------------------------------------------- 1 | data/index.html.i0 2 | 00manifest.i0 3 | 00changelog.i0 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.bookmarks: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.bookmarks -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.branch: -------------------------------------------------------------------------------- 1 | default -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.desc: -------------------------------------------------------------------------------- 1 | 0 2 | commit 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.dirstate: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/find_dvcs/hg/.hg/undo.dirstate -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/hg/index.html: -------------------------------------------------------------------------------- 1 | This is just a test. File was added to mercurial repo. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/find_dvcs/svn/index.html: -------------------------------------------------------------------------------- 1 | This is just a test. File was added to SVN repo. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/spider_man/data_receptor_js.php: -------------------------------------------------------------------------------- 1 | 2 | Start-- 3 | '; 5 | echo 'Welcome, ' . $_POST['user'] . '!
'; 6 | ?> 7 | --End 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/spider_man/index.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 10 | 11 | 12 | 13 |

Prepare to be redirected!

14 |

This page is a time delay redirect

15 | 16 | 17 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/url_fuzzer.tgz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/url_fuzzer.tgz -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/url_fuzzer/index.html: -------------------------------------------------------------------------------- 1 | index.html 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/url_fuzzer/index.html.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/url_fuzzer/index.html.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/url_fuzzer/index.html~: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/url_fuzzer/index.html~ -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web20Spider/2.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | document.location test 4 | 5 | 15 | 16 | 17 | 18 | 19 |

Redirection

20 | 21 | Redirect to the w3af test page. 22 |

23 | 24 | 25 | 26 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web20Spider/3.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_diff/123.html: -------------------------------------------------------------------------------- 1 | 123 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_diff/456.html: -------------------------------------------------------------------------------- 1 | 456 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_diff/exclude.php: -------------------------------------------------------------------------------- 1 | 789 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_diff/index.html: -------------------------------------------------------------------------------- 1 | abc 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/1.gz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/1.gz -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/2.tgz: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/2.tgz -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/a/b/c/d/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/a/b/c/d/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/a/b/c/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/a/b/c/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/a/b/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/a/b/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/a/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/a/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/1.html: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | Go to 2 4 | back 5 | With spaces in filename 6 | With spaces in path 7 | 8 | 9 | 10 | 11 | 12 | -- End 13 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/2.html: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | Go to 3 4 | Go to 4Go back to 1 4 | img id=logo src='/images/w3af.png' alt="w3af"> 5 | Dead end 6 | 7 | -- End -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/4.html: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | 7 dead end 4 | 9 dead end 5 | 6 | -- End -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/a b.html: -------------------------------------------------------------------------------- 1 | non-zero. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/a.gif: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/follow_links/a.gif -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/d f/index.html: -------------------------------------------------------------------------------- 1 | non-zero response for spider. -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/follow_links/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/follow_links/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/ignore_regex/1.html: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | Go to a (this should be ignored) 4 | Do not ignore me! 5 | 6 | -- End 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/ignore_regex/2.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/ignore_regex/2.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/ignore_regex/a.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/ignore_regex/a.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/ignore_regex/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/crawl/web_spider/ignore_regex/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/index.html: -------------------------------------------------------------------------------- 1 | Start -- 2 | 3 | Follow links 4 | back 5 | 6 | -- End -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/relativeRegex.html: -------------------------------------------------------------------------------- 1 | laskndlkans 2 | lasndg88 /f00/bar/lala.html alskfnlaksnf 3 | 4 | /lala/lelo.amsd 5 | !! 6 | 7 | /w3af/discovery/web_spider/follow_links/1.html 8 | 9 | /nalsnd.asp 10 | /w3af/discovery/web_spider/lala.html 11 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/variants/article.php: -------------------------------------------------------------------------------- 1 |

Article number

2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/web_spider/variants/index.php: -------------------------------------------------------------------------------- 1 | 15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/azure.html: -------------------------------------------------------------------------------- 1 | to be found by wordnet 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/blue.html: -------------------------------------------------------------------------------- 1 | This is a blue page, we really like the blue color. 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/green.html: -------------------------------------------------------------------------------- 1 | green is not linked, you shouldnt be here. Go home! 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/hide.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/index.html: -------------------------------------------------------------------------------- 1 | 2 | This is the blue page! 3 | This is the red page! 4 | Linux 5 | unix 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/red.html: -------------------------------------------------------------------------------- 1 | red is baaaaaaaaaad really baaaaaaaaaad! 2 | -------------------------------------------------------------------------------- /webroot/moth/w3af/crawl/wordnet/show.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/ajax/ajax_info.txt: -------------------------------------------------------------------------------- 1 | foo 2 | bar 3 | spam 4 | eggs 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/eicar.com: -------------------------------------------------------------------------------- 1 | X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/eicar.com.txt: -------------------------------------------------------------------------------- 1 | X5O!P%@AP[4\PZX54(P^)7CC)7}$EICAR-STANDARD-ANTIVIRUS-TEST-FILE!$H+H* -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/eicar_com.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/grep/clamav/eicar_com.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/eicarcom2.zip: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/grep/clamav/eicarcom2.zip -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/index.html: -------------------------------------------------------------------------------- 1 | eicar txt
2 | eicar com
3 | eicar zip I
4 | eicar zip II
5 | 6 |

7 | I do not have malware 8 | 9 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/clamav/not-eicar: -------------------------------------------------------------------------------- 1 | Scary malware not found here. -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/click_jacking/index.php: -------------------------------------------------------------------------------- 1 | 5 |

Clickjacking test page

6 | 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/click_jacking/with_header.php: -------------------------------------------------------------------------------- 1 | 5 |

Clickjacking test page with X-Frame-Options protection

6 |
7 | 8 | 9 |
10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/click_jacking/without_protection.php: -------------------------------------------------------------------------------- 1 | '; 6 | var_dump($_POST['foo']); 7 | echo ''; 8 | } 9 | ?> 10 |

Clickjacking test page without protection

11 |
12 | 13 | 14 |
15 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/code_disclosure/cd.html: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/code_disclosure/not_cd.html: -------------------------------------------------------------------------------- 1 | 2 | read my code! 3 | 4 | ?> -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/credit_cards.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | 3b71449635402848
4 | 5 | # A false positive
6 | 7 | _c3E6E547C-BFB7-4897-86EA-882A04BDE274_kDF867BE9-DEC5-0FFF-6629-127552370B17
8 | 9 | --End 10 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/cross_domain_js/cross_domain_script.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/cross_domain_js/cross_domain_script_mixed.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | 5 | 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/cross_domain_js/cross_domain_script_with_type.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/cross_domain_js/local_script.html: -------------------------------------------------------------------------------- 1 | 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/csp/csp_with_error_1.php: -------------------------------------------------------------------------------- 1 | 7 | 8 | 9 | See HTTP header "Content-Security-Policy" values. 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/csp/csp_with_error_2.php: -------------------------------------------------------------------------------- 1 | 7 | 8 | 9 | See HTTP header "Content-Security-Policy" values. 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/csp/csp_without_error.php: -------------------------------------------------------------------------------- 1 | 7 | 8 | 9 | See HTTP header "Content-Security-Policy" values. 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/csp/index.php: -------------------------------------------------------------------------------- 1 | 5 |

Content Security Policy (CSP) test pages

6 | 12 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/directory_indexing/index.html: -------------------------------------------------------------------------------- 1 | Index of / 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/dom_xss/dom_xss_false_positive.html: -------------------------------------------------------------------------------- 1 | <HTML> 2 | <TITLE>Welcome! 3 | Hi 4 | 8 |
9 | Welcome to our system 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/dom_xss/dom_xss_trivial.html: -------------------------------------------------------------------------------- 1 | 2 | Welcome! 3 | Hi 4 | 8 |
9 | Welcome to our system 10 | 11 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/error_500/500.php: -------------------------------------------------------------------------------- 1 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/error_pages/error_page.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 |

Error page exception

4 | 5 | --End 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/event_validation/event_validation.html: -------------------------------------------------------------------------------- 1 | With VIEWSTATE and EVENTVALIDATION 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/event_validation/without_event_validation.html: -------------------------------------------------------------------------------- 1 | With VIEWSTATE, without EVENTVALIDATION 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/feeds.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | 4 | 5 | 6 | --End 7 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/grep_empty/index.html: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/andresriancho/w3af-moth/244ff19a6c4a1fb392975a5037490d72a4538722/webroot/moth/w3af/grep/grep_empty/index.html -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/hash_find/hash.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e 4 | 5 | b026324c6904b2a9cb4b88d6d61c81d1 6 | 7 | --End -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/hash_find/no_hash.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | 11111111111111111111111111111111 4 | 2222222222222222222aaaaaaaaaaaaa 5 | 6 | --End -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/html_comments/html_in_comment.html: -------------------------------------------------------------------------------- 1 | See HTML source code. 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/html_comments/simple_comment.html: -------------------------------------------------------------------------------- 1 | See HTML source code. 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/http_in_body/http_request.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | GET /index.htm HTTP/1.1 4 | 5 | --End 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/http_in_body/http_response.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | HTTP/1.0 200 OK 4 | 5 | --End 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/meta_tags/google_sitemap.html: -------------------------------------------------------------------------------- 1 | See HTML source to find Google verification meta tag 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/meta_tags/linux_meta.html: -------------------------------------------------------------------------------- 1 | See HTML source to find a meta tag that says "linux" 2 | 3 | 4 | 5 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/motw/invalid_MOTW.html: -------------------------------------------------------------------------------- 1 | See HTML source code for an invalid MOTW 2 | 3 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/motw/valid_MOTW.html: -------------------------------------------------------------------------------- 1 | See HTML content for a valid MOTW 2 | 3 | 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/newline/index.html: -------------------------------------------------------------------------------- 1 | a 2 | b 3 | c 4 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/objects/applet.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | 4 | 5 | --End 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/objects/object.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 | 4 | 5 | --End 6 | -------------------------------------------------------------------------------- /webroot/moth/w3af/grep/oracle/oracle.html: -------------------------------------------------------------------------------- 1 | Start-- 2 | 3 |