# PromptZero built-in HTTP path wordlist
# Source: Assembled from public-domain and CC0 materials:
#   - RFC 8615 well-known URIs (IANA registry, public domain)
#   - nginx/Apache default install paths (documented in upstream manuals)
#   - Common framework conventions (public knowledge)
#   - IETF/W3C standardised paths (public domain specs)
# License: CC0-1.0 (this file)
# Target: ~500 entries covering the highest-value discovery paths.
# Lines beginning with '#' are ignored by the http_enum_common handler.
.well-known/security.txt
.well-known/robots.txt
.well-known/apple-app-site-association
.well-known/assetlinks.json
.well-known/change-password
.well-known/host-meta
.well-known/nodeinfo
.well-known/openid-configuration
.well-known/webfinger
robots.txt
sitemap.xml
sitemap_index.xml
favicon.ico
humans.txt
crossdomain.xml
clientaccesspolicy.xml
apple-touch-icon.png
apple-touch-icon-precomposed.png
ads.txt
app-ads.txt
security.txt
admin
administrator
admin.php
admin.html
admin/login
admin/login.php
admin/index.php
admin/dashboard
admin/dashboard.php
admin/config
admin/config.php
admin/users
admin/users.php
administrator/index.php
administrator/login
administrator/login.php
login
login.php
login.html
login/
signin
signin.php
register
register.php
signup
signup.php
logout
logout.php
auth
auth/login
auth/logout
oauth/callback
oauth2/callback
index
index.php
index.html
index.htm
default.asp
default.aspx
default.htm
home
home.php
home.html
dashboard
dashboard.php
api
api/v1
api/v2
api/v3
api/index
api/status
api/health
api/ping
api/version
api/users
api/user
api/auth
api/login
api/logout
api/register
api/me
v1
v2
v3
v1/health
v2/health
health
healthcheck
health-check
status
ping
version
info
test
demo
static
static/js
static/css
static/img
static/images
static/assets
assets
assets/js
assets/css
assets/img
assets/images
js
css
img
images
images/
uploads
uploads/
files
files/
media
media/
download
download/
downloads
downloads/
documents
documents/
docs
docs/
doc
backup
backup/
backups
backups/
old
old/
archive
archive/
temp
temp/
tmp
tmp/
cache
cache/
logs
logs/
log
data
data/
database
db
sql
config
config.php
config.js
config.json
config.yml
config.yaml
configuration
configuration.php
settings
settings.php
app
app/
application
application/
src
src/
app.js
app.php
main
main.php
main.js
web
web/
portal
portal/
panel
panel/
cp
cp/
controlpanel
controlpanel/
management
management/
manager
manager/
console
console/
control
control/
private
private/
secure
secure/
restricted
restricted/
internal
internal/
intranet
intranet/
staff
staff/
user
user/
users
users/
account
account/
accounts
accounts/
member
member/
members
members/
profile
profile/
profiles
profiles/
register/
signup/
signin/
login/
logout/
forgot-password
forgot-password.php
forgot_password
reset-password
reset-password.php
reset_password
password-reset
change-password
change_password
verify
verify.php
verify/
confirm
confirm.php
activation
activation.php
activate
activate.php
phpmyadmin
phpmyadmin/
pma
pma/
phpMyAdmin
phpMyAdmin/
myadmin
myadmin/
mysql
mysql/
dbadmin
dbadmin/
adminer
adminer.php
adminer/
webadmin
webadmin/
mysqladmin
mysqladmin/
wp-admin
wp-admin/
wp-admin/index.php
wp-login.php
wp-content
wp-content/
wp-includes
wp-includes/
wp-config.php
wordpress
wordpress/
wp
wp/
joomla
joomla/
drupal
drupal/
magento
magento/
opencart
opencart/
prestashop
prestashop/
typo3
typo3/
bitrix
bitrix/
xmlrpc.php
readme.html
readme.txt
README.md
CHANGELOG
CHANGELOG.txt
CHANGELOG.md
LICENSE
LICENSE.txt
LICENSE.md
VERSION
VERSION.txt
.git/HEAD
.git/config
.gitignore
.htaccess
.htpasswd
.env
.env.local
.env.production
.env.development
.env.example
.DS_Store
web.config
webpack.config.js
package.json
composer.json
composer.lock
Gemfile
Gemfile.lock
requirements.txt
setup.py
Dockerfile
docker-compose.yml
docker-compose.yaml
Makefile
Taskfile.yml
Taskfile.yaml
app.yaml
app.json
manifest.json
service-worker.js
sw.js
cgi-bin
cgi-bin/
bin
bin/
scripts
scripts/
shell
shell/
exec
exec/
cmd
cmd/
rpc
rpc/
xmlrpc
graphql
graphql/
gql
gql/
query
query/
swagger
swagger/
swagger.json
swagger.yaml
swagger-ui
swagger-ui/
openapi.json
openapi.yaml
api-docs
api-docs/
api/swagger
api/openapi
redoc
redoc/
test
test/
tests
tests/
testing
testing/
dev
dev/
development
development/
staging
staging/
prod
prod/
production
production/
beta
beta/
alpha
alpha/
pre
pre/
preview
preview/
demo/
sandbox
sandbox/
playground
playground/
example
example/
examples
examples/
sample
sample/
samples
samples/
404
403
500
error
error.php
error.html
errors
errors/
error/
maintenance
maintenance.html
coming-soon
coming-soon.html
sitemap
sitemap/
feed
feed/
rss
rss.xml
atom.xml
newsletter
newsletter/
subscribe
subscribe/
unsubscribe
unsubscribe/
contact
contact.php
contact.html
about
about.php
about.html
faq
faq.php
faq.html
help
help/
support
support/
ticket
ticket/
tickets
tickets/
forum
forum/
forums
forums/
community
community/
blog
blog/
news
news/
events
events/
gallery
gallery/
portfolio
portfolio/
projects
projects/
services
services/
products
products/
shop
shop/
cart
cart/
checkout
checkout/
payment
payment/
order
order/
orders
orders/
invoice
invoice/
invoices
invoices/
billing
billing/
subscription
subscription/
subscriptions
subscriptions/
report
report/
reports
reports/
analytics
analytics/
stats
stats/
statistics
statistics/
metrics
metrics/
monitor
monitor/
monitoring
monitoring/
health/
status/
uptime
uptime/
jobs
jobs/
cron
cron/
tasks
tasks/
scheduler
scheduler/
queue
queue/
worker
worker/
feed.xml
sitemap.xml.gz
