任意文件读取漏洞-linux敏感文件路径字典fuzz

/etc/httpd/conf/httpd.conf
/~/.atftp_history
/~/.bash_history
/~/.bashrc
/~/.mysql_history
/~/.nano_history
/~/.php_history
/~/.profile
/~/.ssh/authorized_keys
/~/.ssh/id_dsa
/~/.ssh/id_dsa.pub
/~/.ssh/id_rsa
/~/.ssh/id_rsa.pub
/~/.ssh/identity
/~/.ssh/identity.pub
/~/.ssh/known_hosts
/apache/apache/conf/httpd.conf
/apache/apache2/conf/httpd.conf
/apache/php/php.ini
/etc/anacrontab
/etc/apache/apache.conf
/etc/apache/httpd.conf
/etc/apache2/apache.conf
/etc/apache2/httpd.conf
/etc/apache2/sites-available/default
/etc/apache2/vhosts.d/00_default_vhost.conf
/etc/at.allow
/etc/at.deny
/etc/bashrc
/etc/cron.allow
/etc/cron.deny
/etc/crontab
/etc/fstab
/etc/group
/etc/host.conf
/etc/hosts
/etc/hosts.deny
/etc/httpd/conf.d/httpd.conf
/etc/httpd/conf.d/php.conf
/etc/httpd/conf/httpd.conf
/etc/httpd/htdocs/index.html
/etc/httpd/htdocs/index.php
/etc/httpd/httpd.conf
/etc/httpd/logs/access.log
/etc/httpd/logs/access_log
/etc/httpd/logs/error.log
/etc/httpd/logs/error_log
/etc/httpd/php.ini
/etc/init.d/httpd
/etc/init.d/mysql
/etc/inputrc
/etc/issue
/etc/issue/net
/etc/ld.so.conf
/etc/logrotate.conf
/etc/motd
/etc/my.cnf
/etc/mysql/my.cnf
/etc/network/interfaces
/etc/networks
/etc/passwd
/etc/php.ini
/etc/php/apache/php.ini
/etc/php/apache2/php.ini
/etc/php/cgi/php.ini
/etc/php/php.ini
/etc/php/php4/php.ini
/etc/php4.4/fcgi/php.ini
/etc/php4/apache/php.ini
/etc/php4/apache2/php.ini
/etc/php4/cgi/php.ini
/etc/php5/apache/php.ini
/etc/php5/apache2/php.ini
/etc/php5/cgi/php.ini
/etc/phpmyadmin/config.inc.php
/etc/protocols
/etc/rc.local
/etc/redhat-release
/etc/redis.conf
/etc/resolv.conf
/etc/shadow
/etc/ssh/ssh_config
/etc/ssh/ssh_host_dsa_key
/etc/ssh/ssh_host_dsa_key.pub
/etc/ssh/ssh_host_key
/etc/ssh/ssh_host_key.pub
/etc/ssh/ssh_host_rsa_key
/etc/ssh/ssh_host_rsa_key.pub
/etc/ssh/sshd_config
/etc/syscomfig/network-scripts/ifcfg-eth1
/etc/sysconfig/network
/etc/sysconfig/network-scripts/ifcfg-eth0
/etc/termcap
/etc/vsftpd/vsftpd.conf
/etc/xinetd.conf
/etc/xinetd.d
/home/apache/conf/httpd.conf
/home/apache2/conf/httpd.conf
/home/bin/stable/apache/php.ini
/home/httpd/conf/httpd.conf
/home/root/.atftp_history
/home/root/.bash_history
/home/root/.bashrc
/home/root/.mysql_history
/home/root/.nano_history
/home/root/.php_history
/home/root/.profile
/home/root/.ssh/authorized_keys
/home/root/.ssh/id_dsa
/home/root/.ssh/id_dsa.pub
/home/root/.ssh/id_rsa
/home/root/.ssh/id_rsa.pub
/home/root/.ssh/identity
/home/root/.ssh/identity.pub
/home/root/anaconda-ks.cfg
/home/username/.bash_history
/home/系统中其他用户/.atftp_history
/home/系统中其他用户/.bash_history
/home/系统中其他用户/.bashrc
/home/系统中其他用户/.mysql_history
/home/系统中其他用户/.nano_history
/home/系统中其他用户/.php_history
/home/系统中其他用户/.profile
/home/系统中其他用户/.ssh/authorized_keys
/home/系统中其他用户/.ssh/id_dsa
/home/系统中其他用户/.ssh/id_dsa.pub
/home/系统中其他用户/.ssh/id_rsa
/home/系统中其他用户/.ssh/id_rsa.pub
/home/系统中其他用户/.ssh/identity
/home/系统中其他用户/.ssh/identity.pub
/home/系统中其他用户/anaconda-ks.cfg
/home2/bin/stable/apache/php.ini
/NetServer/bin/stable/apache/php.ini
/opt/nginx/conf/nginx.conf
/opt/www/conf/httpd.conf
/opt/www/htdocs/index.html
/opt/www/htdocs/index.php
/opt/xampp/etc/php.ini
/PHP/php.ini
/php4/php.ini
/php5/php.ini
/porc/config.gz
/porc/self/cmdline
/private/var/log/apache2/access_log
/private/var/log/apache2/error_log
/proc/cmdline
/proc/config.gz
/proc/mounts
/proc/net/arp
/proc/net/dev
/proc/net/fib_trie
/proc/net/route
/proc/net/tcp
/proc/net/udp
/proc/pid/cmdline
/proc/sched_debug
/proc/self/cmdline
/proc/self/cwd
/proc/self/environ
/proc/self/fd/0
/proc/self/fd/1
/proc/self/fd/10
/proc/self/fd/11
/proc/self/fd/12
/proc/self/fd/13
/proc/self/fd/14
/proc/self/fd/15
/proc/self/fd/16
/proc/self/fd/17
/proc/self/fd/18
/proc/self/fd/19
/proc/self/fd/2
/proc/self/fd/20
/proc/self/fd/21
/proc/self/fd/22
/proc/self/fd/23
/proc/self/fd/24
/proc/self/fd/25
/proc/self/fd/26
/proc/self/fd/27
/proc/self/fd/28
/proc/self/fd/29
/proc/self/fd/3
/proc/self/fd/30
/proc/self/fd/31
/proc/self/fd/32
/proc/self/fd/33
/proc/self/fd/34
/proc/self/fd/35
/proc/self/fd/4
/proc/self/fd/5
/proc/self/fd/6
/proc/self/fd/7
/proc/self/fd/8
/proc/self/fd/9
/proc/self/loginuid
/proc/self/stat
/proc/self/status
/proc/verison
/proc/version
/proc/xxxx/cmdline
/root/.atftp_history
/root/.bash_history
/root/.bashrc
/root/.mysql_history
/root/.nano_history
/root/.php_history
/root/.profile
/root/.ssh/authorized_keys
/root/.ssh/id_dsa
/root/.ssh/id_dsa.pub
/root/.ssh/id_ras.keystore
/root/.ssh/id_rsa
/root/.ssh/id_rsa.pub
/root/.ssh/identity
/root/.ssh/identity.pub
/root/.ssh/known_hosts
/root/.viminfo
/root/.wget-hsts
/root/anaconda-ks.cfg
/tmp/apache/htdocs/index.html
/tmp/apache/htdocs/index.php
/usr/lib/php.ini
/usr/lib/php/php.ini
/usr/local/apache/conf/httpd.conf
/usr/local/apache2/conf/httpd.conf
/usr/local/app/apache2/conf/extra/httpd-vhost.conf
/usr/local/app/apache2/conf/httpd.conf
/usr/local/app/php5/lib/php.ini
/usr/local/httpd/conf/httpd.conf
/usr/local/lib/php.ini
/usr/local/tomcat/conf/tomcat-users.xml
/usr/share/tomcat6/bin/startup.sh
/usr/tomcat6/bin/startup.sh
/var/apache2/config.inc
/var/httpd/conf/httpd.conf
/var/httpd/conf/php.ini
/var/httpd/htdocs/index.html
/var/httpd/htdocs/index.php
/var/lib/mlocate/mlocate.db
/var/lib/mysql/my.cnf
/var/lib/mysql/mysql/user.MYD
/var/lib/php/sess_PHPSESSID
/var/local/www/conf/httpd.conf
/var/local/www/conf/php.ini
/var/log/access.log
/var/log/access_log
/var/log/apache/access.log
/var/log/apache/access_log
/var/log/apache/error.log
/var/log/apache/error_log
/var/log/apache2/access.log
/var/log/apache2/access_log
/var/log/apache2/error.log
/var/log/apache2/error_log
/var/log/auth.log
/var/log/chttp.log
/var/log/cups/error_log
/var/log/dpkg.log
/var/log/error.log
/var/log/error_log
/var/log/faillog
/var/log/httpd/access.log
/var/log/httpd/access_log
/var/log/httpd/error.log
/var/log/httpd/error_log
/var/log/lastlog
/var/log/lighttpd/access.log
/var/log/lighttpd/error.log
/var/log/lighttpd/lighttpd.access.log
/var/log/lighttpd/lighttpd.error.log
/var/log/messages
/var/log/mysql.log
/var/log/mysql/mysql.log
/var/log/mysql/mysql-bin.log
/var/log/mysql/mysql-slow.log
/var/log/mysqlderror.log
/var/log/secure
/var/log/syslog
/var/log/wtmp
/var/log/xferlog
/var/log/yum.log
/var/mail/root
/var/mysql.log
/var/run/utmp
/var/spool/cron/crontabs/root
/var/spool/mail/root
/var/webmin/miniserv.log
/var/www/conf/httpd.conf
/var/www/htdocs/index.html
/var/www/htdocs/index.php
/var/www/html/
/var/www/html/apache/conf/httpd.conf
/var/www/html/index.html
/var/www/index.html
/var/www/index.php
/var/www/logs/access.log
/var/www/logs/access_log
/var/www/logs/error.log
/var/www/logs/error_log
/var/www/phpmyadmin/config.inc.php
/web/conf/php.ini
/www/conf/httpd.conf
/www/htdocs/index.html
/www/htdocs/index.php
/www/php/php.ini
/www/php4/php.ini
/www/php5/php.ini
/xampp/apache/bin/php.ini
/xampp/apache/conf/httpd.conf

其中：/var/lib/mlocate/mlocate.db  为linux索引文件包含所有系统文件列表。