# Common File Names
# Source: SecLists + commonly discovered files

# Configuration Files
config.php
config.ini
config.xml
config.yml
config.yaml
config.json
config.conf
config.cfg
web.config
application.properties
settings.py
settings.php
settings.xml
.env
.env.local
.env.backup
dotenv
.htaccess
htaccess.txt
robots.txt
sitemap.xml
humans.txt
security.txt
ads.txt
.gitignore
.gitattributes
.gitkeep
Procfile
Dockerfile
docker-compose.yml
docker-compose.yaml
docker-compose.override.yml
kubernetes.yml
k8s.yml
deployment.yml
service.yml
ingress.yml
configmap.yml
secret.yml
namespace.yml
helm.yml
values.yml
Chart.yaml
package.json
package-lock.json
yarn.lock
package-lock.yaml
composer.json
composer.lock
Gemfile
Gemfile.lock
pipfile
pipfile.lock
requirements.txt
poetry.lock
pyproject.toml
setup.py
go.mod
go.sum
Gopkg.toml
Gopkg.lock
Cargo.toml
Cargo.lock
pom.xml
build.gradle
settings.gradle
build.sbt
project.clj
mix.exs
rebar.config
Makefile
CMakeLists.txt
Rakefile
Gruntfile.js
Gulpfile.js
webpack.config.js
webpack.config.ts
webpack.config.prod.js
webpack.config.dev.js
vite.config.js
vite.config.ts
rollup.config.js
rollup.config.ts
parcel.config.js
parcel.config.ts
angular.json
angular-cli.json
tsconfig.json
tsconfig.app.json
tsconfig.spec.json
tsconfig.base.json
babel.config.js
babel.config.ts
.babelrc
.browserslistrc
.eslintrc
.eslintrc.js
.eslintrc.json
.eslintrc.yaml
.eslintrc.yml
.prettierrc
.prettierrc.js
.prettierrc.json
.prettierrc.yaml
.prettierrc.yml
.editorconfig
.stylelintrc
.stylelintrc.js
.stylelintrc.json
.stylelintrc.yaml
.stylelintrc.yml
.pnpmfile.cjsn
.npmrc
.yarnrc
.yarnrc.yml

# Backup Files
backup.php
backup.sql
backup.zip
backup.tar
backup.tar.gz
backup.bak
backup.old
backup.1
backup.2
backup~backup.zip
backup.tar.gz
backup.sql
backup.bak
backup.old
backup.1
backup.2
backup~
config.php.bak
config.php.old
config.php.backup
config.php~
config.php.orig
config.php.save
config.php.dist
wp-config.php.bak
wp-config.php.old
wp-config.php.backup
wp-config.php~
wp-config.php.orig
wp-config.php.save
wp-config.php.dist
database.sql.bak
database.sql.old
database.sql.backup
database.sql~
database.sql.orig
database.sql.save
database.sql.dist
dump.sql
dump.sql.bak
dump.sql.old
dump.sql.backup
dump.sql~

# Database Files
database.sqlite
database.sqlite3
database.db
database.db3
db.sqlite
db.sqlite3
db.db
db.db3
data.sqlite
data.sqlite3
data.db
data.db3
storage.sqlite
storage.sqlite3
storage.db
storage.db3
app.sqlite
app.sqlite3
app.db
app.db3
test.sqlite
test.sqlite3
test.db
test.db3
dev.sqlite
dev.sqlite3
dev.db
dev.db3
prod.sqlite
prod.sqlite3
prod.db
prod.db3
staging.sqlite
staging.sqlite3
staging.db
staging.db3

# Log Files
error.log
errors.log
access.log
access.log
debug.log
info.log
warn.log
warning.log
fatal.log
trace.log
audit.log
security.log
auth.log
auth.log
apache.log
nginx.log
app.log
application.log
server.log
request.log
response.log
sql.log
query.log
slow.log
error_log
error_log
php_errors.log
laravel.log
stderr
stdout
stdin
syslog
messages
kern.log
mail.log
daemon.log
syslog
user.log
cron.log
authpriv.log
boot.log
yum.log
maillog
messages
secure

# Hidden Files
.git
.gitignore
.gitattributes
.svn
.cvsignore
.hg
.hgignore
.DS_Store
Thumbs.db
desktop.ini
.env
.env.local
.env.development
.env.production
.env.test
.env.staging
.rvmrc
.gemrc
.irbrc
.pryrc
.ruby-version
.ruby-gemset
.node-version
.nvmrc
.python-version
.terraform
.terraform.lock.hcl
terraform.tfstate
terraform.tfvars
terraform.tfstate.backup
.ansible
.vagrant
.vagrantignore
.dockerignore
.dockerfile
.dockerfile.prod
.dockerfile.dev
.dockerfile.staging
.dockerignore
.editorconfig
.eslintrc
.prettierrc
.stylelintrc
.babelrc
.flowconfig
.jsconfig
.tsconfig
.idea
.vscode
.vs
.suo
.user
proj.user
.csproj
.sln
.sln.docstates
.workspace
.sublime-project
.sublime-workspace
.atom
.project
.settings
launch.json
tasks.json

# Common Web Files
index.html
index.php
index.asp
index.aspx
index.jsp
index.js
default.html
default.php
default.asp
default.aspx
default.jsp
home.html
home.php
main.html
main.php
app.html
app.php
api.html
api.php
login.html
login.php
admin.html
admin.php
dashboard.html
dashboard.php
panel.html
panel.php
console.html
console.php
user.html
user.php
users.html
users.php
profile.html
profile.php
account.html
account.php
settings.html
settings.php
search.html
search.php
results.html
results.php
contact.html
contact.php
about.html
about.php
help.html
help.php
faq.html
faq.php
terms.html
terms.php
privacy.html
privacy.php
sitemap.html
sitemap.php
sitemap.xml
robots.txt
humans.txt
ads.txt
security.txt
well-known
apple-app-site-association
assetlinks.json
braintree.json
manifest.json
service-worker.js
sw.js
workbox.js
offline.html
404.html
403.html
401.html
500.html
502.html
503.html
maintenance.html
maintenance.php
coming-soon.html
coming-soon.php

# API Endpoints
api
v1
v2
v3
v4
graphql
graph
schema
ws
socket
rpc
soap
rest
health
status
ping
metrics
prometheus
actuator
info
env
configprops
beans
mappings
shutdown
trace
threaddump
heapdump
loggers
auditevents
hystrix.stream
gateway
consul
eureka
zuul
ribbon
feign
sleuth
zipkin
admin
management
jolokia
hawkular
kubernetes
openshift
swagger
api-docs
swagger-ui
redoc
graphiql
playground
explorer
sandbox
test
testing
dev
development
staging
stage
production
prod
beta
alpha
demo
sample
example
template
mock
stub
fake
dummy
