SecLists
SecLists copied to clipboard
Fixes #760: Strip leading slashes from web discovery word lists
This pull strips a leading slash from the web discovery word lists, if present. There was a discrepancy with the word lists, for example common.txt and quickhits.txt.
If a payload location is defined as target.com/§§
, and the web server doesn't handle dual leading slashes neatly, things can be missed during content discovery.
Addresses issue #760
How did you do this? Did you use a script?
Correct, I ran a script to strip a single leading slash at the beginning of a line in files under the Discovery/Web-Content/
directory
cd Discovery/Web-Content/
find . -type f -exec perl -pi -e 's/^\///' {} \;
I used perl
here but sed
would work just fine too.
Thank you so much! Great call out