danielmiessler / SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Home Page:https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Add humans.txt and security.txt files to Web-Content discovery file lists

phillipdade opened this issue · comments

The following files should be added to the raft-*-files.txt list:

humans.txt
security.txt

These files would likely reside within the .well-known directory so maybe should be added in there too, but not sure if these file lists are suitable location

.well-known/humans.txt
.well-known/security.txt

Why the raft-* lists?

Please keep in mind that the source for the raft-* wordlists is the Google RAFT project. Perhaps SecLists/Discovery/Web-Content/common.txt would be better suited for these contributions.

common.txt already has .well-known/security.txt, so all that would be left to add is .well-known/humans.txt.
For context, see: https://humanstxt.org/

@phillipdade Woudl you like to add this to a MR?

Done (Thanks @molangning )