Skip to content

Instantly share code, notes, and snippets.

@abdulsec
Forked from Uyavuz24/api_wordlist.txt
Created May 3, 2021 08:45
Show Gist options
  • Save abdulsec/66454f27ea1d1eb00ec4a24faefe324a to your computer and use it in GitHub Desktop.
Save abdulsec/66454f27ea1d1eb00ec4a24faefe324a to your computer and use it in GitHub Desktop.
api wordlist
/2
/graphql-proxy/admin
/3.0/
/3ds_callback
/3ds_update_payment_callback
/accounts
/active
/activity
/actuator
/actuator/auditevents
/actuator/autoconfig
/actuator/beans
/actuator/configprops
/actuator/docs
/actuator/dump
/actuator/env
/actuator/flyway
/actuator/health
/actuator/heapdump
/actuator/info
/actuator/jolokia
/jolokia/version
/actuator/liquibase
/actuator/logfile
/actuator/loggers
/actuator/mappings
/actuator/metrics
/actuator/sessions
/actuator/threaddump
/actuator/trace
/_admin
/admin
/adminer/
/adminer.sql
/admin/heapdump
/admin.php
/after.sh
/a/i
/aliases
/altair
/api
/api/3.0/artists/
/api/config/packages/api_platform.yaml
/api-docs
/apidocs
/api/graphql
/apikey
/api/proxy
/apis
/api/v1
/api/v1/
/api/v1/labels
/api/v1/label/version/values
/api/v1/login
/api/v1/swagger.json
/api/v1/targets
/api/v2
/api/v2/login
/api/v3
/api/v3/login
/api/v3/projects/
/api/v5/projects/
/app.json
/application.wadl
/app-stats
/.appveyor.yml
/.arcconfig
/.arcrc
/artists/
/jolokia/list
/assets/images
/assets/images/
/assets/images/big-checkbox-583f9f7f.png
assets/images/big-checkbox-583f9f7f.png
assets/images/loader-dark-45940ae3.gif
assets/images/upsell-icon-74191f89.svg
/auditevents
/auth_callback
/autoconfig
/.aws/credentials
/.babelrc
/backup
/backup.sql
/balance
/.bash_history
/.bashrc
/beans
/block
/blocks
/blog
/blog/
/blog/blog.rss
/blog/page-data/
/blog/page-data/app-data.json
/blog/sw.js
/blog/_wpeprivate/config.json
/books
/.bower.json
/bower.json
/.bowerrc
/build.xml
/calendar
/calendar.json
/category
/category/
/_cat/indices
/cgi
/change
/charts
/charts/
/charts/top
/charts/top?genre=
/check
/.circleci/config.yml
/circle.yml
/close
/codeception.yml
/coins
/comment-
/community-guidelines
/company
/composer.json
/composer.lock
/config
/config/database.yml
/config/deploy.yml
/config.json
/config.lua
/config.php.txt
/configprops
/config.rb
/config.ru
/_config.yml
/connect/clean-legacy
/connect/session
/connect/session/token
/create
/create-notice?key=
/create-ticket
/creators
/crypto
/current
/CVS/Entries
/CVS/Root
/dasbhoard/
/dashbox
/dashbox/
/data/
/data.txt
/debug
/demo
/demo
/deposits
/dev
/discover
/discover/sets/
/dj
/django.log
/docker-compose.yml
/Dockerfile
/.dockerignore
/docs
/docs/api/cookies
/docs/api/privacy
/docs/graphiql
/docs/graphql_playground
/domain
/download
/downloads/dom.php
/.DS_Store
/dump
/e88
/.editorconfig
/Elmah.axd
/.env
/env
/.env.sample
/errors
/.eslintrc.json
/etc
/event
/eventIndex
/events
/explorer
/export
/favorite
/feature
/features
/fetch
/file
/files
/fills
/flyway
/forecast
/funding
/Gemfile
/Gemfile.lock
/.git
/.gitattributes
/.git/config
/.git/HEAD
/.gitignore
/.gitmodules
/glass
/global
/go
/go/already/:plan
/go/buy/:plan
/go/getback
/go/purchased/:plan
/graph
/graphiql
/graphiql/finland
/graphiql.php
/graphql
/graphql/console
/graphql-explorer
/graphql.php
/grapql-explorer
/greetings
/greetings.jsonld
/gruntfile.coffee
/Gruntfile.coffee
/gruntfile.js
/Gruntfile.js
/Gulpfile
/gulpfile.js
/Gulpfile.js
/handleContextUpdate
/health
/healthz
/heapdump
/heartbeat
/.hg
/.hg/requires
/history
/holds
/holiday
/home
/Homestead.yaml
/hosts
/.htaccess
/.htpasswd
/imprint
/in
/index.js
/indicators
/info
/ingredient
/instance
/instance/1/theinstance1
/instance/statuslist
/ipv4
/ipv6
/java/
/Jenkinsfile
/jenkins/script
/.jestrc
/jobs
/jobs/1
/jobs/1/hm-deploy-1-theinstance1-9
/jolokia
/karma.conf.js
/lastRenderedEventIndex
/latestblock
/law-enforcement-guidelines
/ledger
/_legacy
/license
/LICENSE
/license.md
/LICENSE.md
/license.txt
/LICENSE.txt
/likes
/liquibase
/list
/listeners
/logfile
/loggers
/login/cpanel
/logout
/lookup
/main.js
/maintenance
/Makefile
/malware
/manage/heapdump
/manifest.json
/manifest.yml
/mappings
/matches
/me
/me/activities/all/own
/me/settings/privacy
/messages
/me/student-verification/start
/me/student-verification/status
/metrics
/mkdocs.yml
/multiaddress
/mw-config/
/.mysql_history
/network-enforcement-act
/nginx_app.conf
/nginx.conf
/nginx_status
/nids
/nomad
/nomad/global/
/nomad/global/cluster
/notices?key=
/notifications
/notifications/3d_callback/checkout/:urn
/notifications/3d_callback/details_update/:product
/npm-debug.log
/.npmignore
/npm-shrinkwrap.json
/old
/orders
/out
/package.json
/page/
/pages/
/pages/contact
/pages/cookies
/pages/copyright
/pages/copyright/report
/pages/copyright/report/form
/pages/embed
/pages/modern-slavery-act
/pages/privacy
/pages/unsubscribed
/payment
/payments/checkout
/payments/checkout/
/payments/checkout/billing_address
/payments/consumer-subscriptions/active
/payments/consumer-subscriptions/active/payment_details
/payments/creator_subscriptions/active/payment_details
/payments/encryption_details
/paypal_callback
/people
/people/directory
/people/directory/
/phishing
/phpinfo
/phpinfo.php
/php.php
/phptest.php
/phpunit.xml
/picture
/playground
/pom.xml
/popular/searches
/position
/pprof
/price
/pro
/pro/buy/:plan
/Procfile
/product
/products
/.profile
/profile
/profiles
/pro/purchased/:plan
/pro/redeem/:code
/proxy
/pulses
/query
/Rakefile
/rancher-compose.yml
/rate
/rawblock
/read_file
/readfile
/readme
/README
/readme.html
/README.html
/readme.md
/README.md
/readme.mkd
/README.mkd
/readme.txt
/README.txt
/recipe
/related
/RELEASE_NOTES.txt
/reload
/repay
/report
/rescan
/Resources.zip.manifest
/reviews
/routes-stats?key=
/.rspec
/.s3cfg
/scan
/script
/search
/search/
/Search-Replace-DB/
/Search-Replace-DB-master/
/search/sounds/?filter.license=to_share
/section
/secure/attachmentzip/
/secure/ConfigureReport!default.jspa
/secure/ConfigureReport.jspa
/self
/send
/serverless.yml
/server-status
/service?Wsdl
/sessions
/sets/
/settings
/settings/content
/settings/notifications
/sftp-config.json
/sheerid_callback
/si/
/signin
/sign-out
/solr
/spam
/sqlnet.log/account
/sr/
/SS/
/.ssh/authorized_keys
/.ssh/config
/.ssh/id_rsa
/.ssh/id_rsa.pub
/.ssh/known_hosts
/stations/
/status
/status2
/stream
/student
/student?ref=t2045
/student/reverify
/student/verify
/style
/subscribe
/subscribed
/subscription/orders/
/.subversion/config
/suggest
/.svn
/.svn/entries
/swagger.json
/swagger-ui
/.swp
/tags
/tags/
/temp/
/terms-of-use
/test
/test/apacheasp/test.asp
/test/cgi/test.html
/test/fcgi/fcgi.py
/test/fcgi/test.fcgi
/testing
/test.php
/test/php/test.php
/test/python/test.py
/test/ssi/test.shtml
/threats
/Thumbs.db
/ticker
/time
/tmp
/today
/tomorrow
/trace
/Trace.axd
/transaction
/.travis.yml
/try
/tsconfig.json
/tx
/type
/types
/unsubscribe
/upload
/url
/user
/users
/v1
/v1/altair
/v1/connectors/
/v1/event
/v1/events
/v1/explorer
/v1/graphiql
/v1/graphiql.php
/v1/graphql
/v1/graphql/console
/v1/graphql.php
/v1/grapql-explorer
/v1/pixels/track
/v1/playground
/v1/resolve-ui-configurations/by-name/
/v1/solutions/search
/v1/workflows/org/
/v2
/v2/altair
/v2/_catalog
/v2/explorer
/v2/graphiql
/v2/graphiql.php
/v2/graphql
/v2/graphql/console
/v2/graphql.php
/v2/grapql-explorer
/v2/playground
/v3
/Vagrantfile
/validate
/vendor/autoload.php
/verify
/version
/VERSION
/version.txt
/.vimrc
/volume
/w1.
/web.config
/WEB-INF/web.xml
/webpack.config.js
/wis.
/withdrawals
/workflow-ids
/.wp-config.php.swp
/_wpeprivate/config.json
/yarn-debug.log
/yarn-error.log
/yarn.lock
/.yarnrc
/.config.php
/.git/config
////../../data/config/microsrv.cfg
//admin/config.php
/admin/config.php
/administrator/webconfig.txt.php
/app.config
/audit.config
/Cassini.exe.config
/ccnet.config
/cgi-bin/config.exp
/conceptual.config
/config
/config.inc
/config.inc.php
/NHibernate.Caches.SysCache.Tests.dll.config
/NHibernate.config
/NLog.config
/nunit-agent.exe.config
/nunit-gui.exe.config
/nunit-x86.exe.config
/nunit.exe.config
/Rhino.Commons.NHibernate.dll.config
/runFile.exe.config
/sconfig.php
/services.config
/StateNameServer.exe.config
/Sysindex.config
/System.config
/Web.confide
/webconfig.php
/webconfig.txt.php
/wp-config.php
/wp-includes/css/wp-config.php
/wp-includes/fonts/wp-config.php
/wp-includes/modules/wp-config.pop
/xamlSyntax.config
/xunit.console.exe.config
/internal_api/1/accounts/
/internal_api/
/internal_api
/application.wadl?detail=false
/application.wadl?detail=true
/main.js
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment