added new backupfiles in wordpress fuzz list

[abhishekmorla]

credits to : https://www.linkedin.com/feed/update/urn:li:activity:6979486318774923264/

[ItsIgnacioPortal]

This needs to be cleaned up. wordpress.fuzz.txt is for fuzzing wordpress. Paths such as ".vscode" and ".viminfo" have nothing to do with wordpress, so they should be in a different wordlist. a general fuzzing wordlist.

Also, what could be the benefit of knowing of the .viminfo and .vscode paths?

[abhishekmorla]

.viminfo stores the command line history which can be beneficial in the initial enumeration of the site. if it's about CTFs then .vscode can also contain juicy information for the next flag.

shall I add these paths in the general wordlist and remove them from WordPress list?

[ItsIgnacioPortal]

The following filenames are already in this repository but in other wordlists, and aren't related to wordpress:

• .viminfo
• .vscode
• cgi-bin
• .htaccess
• config.codekit

I think it makes sense to add the rest:

• dup-installer-bootlog
• wp-snapshots
• installer-backup.php
• installer.php
• wordfence-waf.php

Expect for a couple: What's the context behind license.tet, and i.php @abhishekmorla?

[g0tmi1k]

Thanks for this @abhishekmorla

[ItsIgnacioPortal]

@g0tmi1k this pull request wasn't ready for merging. Please read my previous comment here.