# Coercive list

\.\.
\~$
/.+\.7z
/.+\.ashx
/.+\.asp
/.+\.asp\.bak
/.+\.axd
/.+\.bak
/.+\.backup
/.+\.bck
/.+\.bz
/.+\.bz2
/.+\.dat
/.+\.exe
/.+\.gz
/.+\.jsp
/.+\.log
/.+\.md5
/.+\.old
/.+\.rar
/.+\.save
/.+\.sql
/.+\.swp
/.+\.tar
/.+\.tar\.bz2
/.+\.tar\.gz
/.+\.tbz2
/.+\.tgz
/.+\.zip
/\.bash_history
/\.DS_Store
/\.env
/\.env.production
/\.git
/\.git/config
/\.ftpconfig
/\.kube
/\.kube/config
/\.vscode/sftp\.json
/_3001092203_\.php
/_ignition/execute-solution
/1111111111111111111111111111111-index\.html
/123\.bz
/1234\.bz
/1234\.php
/123/ok/index\.html
/1ytnzpekh\.php
/503\.php
/62b35cf124a4\.php
^/3\.php$
/4index\.php
/4pric\.php
/aa\.php
/ah\.php
/abu\.php
/about\.php
/about/security
/accesson\.php
/account/\.git/HEAD
/addcrop\.php
/ajax-requests\.new\.php
/alfa\.php
/alfapas\.php
/alfa_data
/alfacgiapi
^/admin(/|\.php|$)
/admin/safefiles\.md5
/adminer_?\.php
/adminer-[0-9\.]+\.php
/admin/db
^/administrator(/|$)
/adminMysql
/api\.php
/api/file/formimage
/api/user/ismustmobile
/api/v2\.0/systeminfo
/app-ads.txt
/app/monitor
/apple-app-site-association
/archivarix\.cms\.php
/array_diff_uassoc\.php
/assets/
/assets/filemanager/dialog\.php
auto_prepend_file
/auto_seo\.php
/ax87es\.php
/axis2
/back/credentials\.txt
/backup\.sql
/backups/config\.json
/backups/sftp-config\.json
/bak/
/bak/credentials\.txt
/bak/sftp-config\.json
/base\.php
/bash\.alfa
/betdiyffse\.php
/bitwise\.php
/blkbefqor\.php
/bump\.php
/c0derz_shell\.php
/cgialfa
/cgi-bin
/cgi-bin/viewimg
/CHANGELOG\.txt
/chosen\.php
/chomper\.php
/cjfuns\.php
ckeditor
ckfinder
/class.api\.php
/class-wp-customize-date-time-control-core\.php
/class-wp-image-editor-fd\.php
/class-wp-network-wp\.php
/class-wp-page-zXJGhl\.php
/cgi-bin/
/cgi-bin/viewlink
/cms\.html
/combined\.php
/composere?\.php
/config\.json
/config/production\.json
/contact/security
/contato\.php
/content-link\.php
/core/misc/drupal\.js
/cpanel\.php
/credentials\.txt
cyberwatch
/cyberwatch\.app
/cx_platform/conf\.json
/cxwlcms\.php
^/dashboard
/data/admin/allowurl\.txt
/data/conf/version\.txt
/database/
/dbadmin/
/db(/|$)
/db\.php
/defaults\.php
/disclosure(/|$)
/dNvo19Yg7JM6jxxu
/dropdown\.php
^/drupal\d+?
/druid/coordinator
/dw\.php
/dump\.sql
/dup-installer/main\.installer\.php
/e/DoInfo/AddInfo\.php
/etc/ssl
/etc/ssl/private
/emergency\.php
/ern1\.php7
/ern1\.php
/ex\.php
/fatheaded\.php
/fgt_lang\.js
/filemanager/dialog\.php
function\.php
/fpc/app/login
/fpebr\.php
/ftpsync\.settings
/gel4y\.php
/gelay\.php
/gtoext\.php
/h4xor\.php
/hekenews
/Hhhknt-an9awlbkhhh\.php
/heads\.php
/hello\.php
/help/security
/inc20k1\.php
^/includ$
/index/function\.php
/index/login/reg\.html
/info\.php
/info/security
/init\.php
/inje3ctor\.php
/inputs\.php
/install\.php
/ioxi001\.php7
/ioxi002\.php7
/jp1dw\.php
/jqury-cdn1\.js\.php
/jr\.php
/js/ckfinder/ckfinder\.html
/kil\.php
/kcfinder/upload\.php
/large-header-stream\.php
launchplatform
/legal/privacy-policy
/licence\.txt
/link-template-cron\.php
/login\.aspx
/login\.php
/logindisclaimer
/lottery/rotate/index\.php
/lv\.php
/mailer\.php
/main\.installer\.php
/manager/assets/modext/license\.txt
/market/market-ws/iframe\.html
matomo\.cloud
/matomo.php
/mayicms
/misc/drupal\.js
/mixins\.php
/mnTIQa1kuWt\.php
/ms-files-private\.php
/my\.bz
/myadmin
/myshell\.php
/mysql
/my1\.php
/nav-menu-template-path\.php
/nd7\.php
/net\.php
/node/add
/notice\.php
/o6yb7\.php
/owl\.php
/_?_?1?2?php-?my-?admin_?
/p/login
/page\.php
/page-30c\.php
passwd
/payment\.php
/perl\.alfa
/php\.exe
/php-cgi\.exe
/php-cgi/
/phpinfo\.php
/phpmanager
/phppma/
/phpmy/
php://input
/pma\d*(/|$)
/pma/index\.php
/portal/index/protocol\.html
/poster\.php
/preview\.php
/print\.php
/program/index\.php
/pub/503\.php
/pub/errors/
/pub/errors/503\.php
/pub/errors/default/report\.phtml
/pub/errors/design\.xml
/pub/errors/init\.php
/pub/errors/local\.xml\.sample
/pub/errors/plusad\.php
/pub/ups\.php
/pub/z\.php
/px9nis\.php
/py\.alfa
/radio\.php
/readme\.html
/readme\.txt
/rediraction\.php
/remoteaccess/login
/remote/fgt_lang
/remote/login
/remittency\.php
/rendi59\.php
/repeater\.php
/report-security
/report-vulnerability
/responsible-disclosure
/rest-api-ajax\.php
/restore/config\.json
/restore/credentials\.txt
/restore/sftp-config\.json
/rindex\.php
/room/getRoomBangFans
/runtime/log
/sam\.php
/searchformz\.php
/sellers?\.php
server\.key
/sfm\.php
sftp-config\.json
/security(/|$)
/security-advisories
/security-contact
/security-center
/security-info
/security-notice
/security-policy
/security-report
/shells?\.php
/shell4?\.php
/shopdb/
/simple\.php
/site-brandes\.php
/sitelog\.php
/site_name_com\.gz
/site_name_com\.sql
/sitecore
/sitecore/admin/login.aspx
/sitecore/shell/sitecore\.version\.xml
/solr/admin
^/sql/
/sql\.php
/sqladmin
/sqlmanager
^/src\.php
/ss\.php
/st\.php
/static/mobile/user\.html
/style\.php
/ss\.php
/sslvpnclient
/sub\.php
/suck\.php
/svpn/index\.cgi
/swm\.php
system32
/tab_licitacoes-old\.php
/taf\.php
/te2soqliwzr\.php
/Telerik\.Web\.UI\.WebResource\.axd
/uas/login
/unzipper\.php
/upload\.php
/ups\.php
/user/password
/Ueditor/net/controller\.ashx
^/v9\.php
/var/pma
/vendor
/vulnerability-disclosure
/wallet\.dat
/web_system\.php
/webdb/
/website\.bz
/websql/
/webuploader
/websso/SAML
/\.well-known/alfa_data
/\.well-known/alfacgiapi
/\.well-known/cgialfa
/well-known\.zip
/whl7svv9d4
/wjepcgbh23
/wsxxulaq47
/widgets\.sys\.php
/wordpress
/WP$
/wp-aa\.php
/wp-add\.php
/wp-admin
/wp-apxupx\.php
/wp-atom\.php
/wp-content
/wp-cron
/wp-dsa\.php
/wp-head\.php
/wp-header
/wp-includes
/wp-index\.php
/wp-info
/wp-json
/wp-ldd\.php
/wp-login
/wp-old
/wp-toz\.php
/wp-ver\.php
/wp-x\.php
/wp-\d+\.php
/ws/index/getTheLotteryInitList
/wwwroot\.bz
/www\.sql
/wzy\.php
/xfox\.php
/xmlrpc\.php
/xleet-shell\.php
/xx\.php
/xxxss
/Y29uZGl0aW
/yeti/\.git/HEAD
/z\.php
/zaco\.php