attacksagainstwordpress/requests.txt at master · SmartFinancialResearch/attacksagainstwordpress · GitHub

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
wp-login.php
xmlrpc.php
idb.php?host=test
wp-load
phpunit.xsd
output.php
/temp/
/web/
/portal/
/dev/
/cms/
/tmp/
user.php
hivcxa.php
?author=1, ?author=2, etc.
?feed=rss2
rnnvhs.php
/wp-content/uploads/
tmpe.php
szalog.php
various /wp-includes/
SimplePie/Parse/Parse.php?ghst=1
/back/
/oldsite/
/backup/
/old/
/new/
/blog/
/wp/
/wordpress/
default.php
feal.php
single.php
plugins.php
2019.php
uploads.php
twentyseventeen.php
feal1.php
languages.php
BirdsRios.php
users-new.php?login=lYEv7B
info.php
/smart-google-code-inserter/screenshot1.jpg
admin.js
admin-ajax.php
admin-post.php
livechat.css
wp-piwik.js
designer.js
yellow-pencil.js
/3
/2
/admin-ajax.php?page=301bulkoptions
comany.php?hgmsky=
configurationbak.php
way2register.php
wp-includse.php?script=1
404.php
tong.php?login=kmufg
unz.php
kill.php
index.js
sizing.php
wp-cokd.php
seo_script.php
cms.php
consystem.php
wp-cache.php
/rss/order/new/
/downloader/
/notifystock/
/admin/
/XAttacker.php?X=Attacker
trackback.php
missok.php?x=1
ghfvvaw.php
//ldskflks
dump.sql
yjh.php
engine_functions.php
mydomainname.sql
xmlrpz.php
LICENSE.php
hi.php?0=1
class-comments.php
log.php
show.php?check=1
b.php
bug.php
kup.php?u=1
wp-logs.php?action=test
maill.php
sys.php.php
indes.php
wp-conde.php
class.wp-date.php
/1
wp-register.php
common.php
hdweb.php
backups.php?mode=config&key=verylongkeywashere
administrator/index.php
/en
/test
/press
/website
/site
/www
/main
/demo
/home
/blog
bb.php
search.php
wp-rdf.php
/admin.post.php?page=wpsm_responsive_coming_soon
admin-post.php?action=hc_ajax_save_option
eval-stdin.php
suspect.sys.php
error.php
newgolden.php
functions.php
goh.php
modules.php
yt.php
wp-cahce.php
wp-feed.php
public.min.css
wppcp-front.css
content_elements.crush.css
js.php
widgets.php
images.php
css.php
user.php
network.php
colors.php
wp-login.php?action=lostpassword
/join
/wp-login.php?action=register
/siteground-optimizer/v1/enable-option
style.css
notices.css
wplcstyle.css
aul.php
ask.php.suspected
bl.php
admin-ajax.php?action=nd_learning_import_settings_php_function
admin-ajax.php?nd_options_value_import_settings=siteurl%5Bnd_options_value%5Dhttps%3A%2F%2fexample.com%2Fpret.js%3FI%3d1 (I removed the actual domain because it's probably malicious)
/wp-json/wp/v2/users/
/.ssh/id_ed25519
/.ssh/id_ecdsa
/.ssh/id_dsa
/WinSCP.ini
/winscp.ini
/FileZilla.xml
sitemanager.xml
filezilla.xml
/WS_FTP.ini