1 2 3 1.txt 2.txt ai api accountapi account-api account_api chat history help helpline halpline hal avatars avatar cgi-bin phpinfo /cgi-bin/phpinfo.php phpinfo.php cross crossdomain crossdomain.xml domain customtemplate CustomTemplate.php /libs/CustomTemplate.php libs lib sitemap.xml sitemap info pragma ProductTemplate ProductTemplate.java.bak infoleak leak bypass robots.txt robots robot dev development tst prd prod test backup /backup .git /.git/ invalid authentication admin-roles attack attacker hack hacker hackers java AccessTokenUser.java /backup/AccessTokenUser.java ProductTemplate.java /backup/ProductTemplate.java /backup/ProductTemplate.java.bak /post/comment/confirmation.zip confirmation.zip confirmation.bak administrator-panel administrator_panel administratorpanel /admin_panel/update_forgot_email/ update_forgot_email confirmation.0 confirmation.old confirmation.-old backup.zip source.zip code.zip secrets.zip password.zip info.zip path nextproduct /admin role-selector roleselector role roles selector X-Custom-IP-Authorization: 127.0.0.1 localhost trace TRACE hello log_in administrator admin.conf js /resources/js/tracking.js /resources/js/downloadReport.js /resources/js/changeEmail.js /resources/js/searchResults.js /resources/js/stockCheck.js /resources/js/xmlStockCheckPayload.js xmlStockCheckPayload.js stockCheck.js stock settings setting debug searchResults.js searchResults downloadReport.js downloadReport download download-transcript transcript load loadimage report save-report save_report savereport report.pdf tracking.js isloggedin password username sign sign-in signin sign_in sign-out sign_out logout logoff comment reg registration register new blog posts account my-account my_account my-account-details my_account_details myaccount myaccountdetails myaccountdetail my-account-details/change-email my-account-details/update-email new-password new_password refresh version ver v1 v2 back refreshpassword refresh_password refresh-password post resources resource image images /resources/images/tracker.gif third-party login log-in exploit upload files productID search_term search-term searchterm term searchadvanced tracker tracker.gif id email mail log logs page forgot forgot-password forgotpassword forgot_password advance adv advanced search search_advanced filteredsearch filter lookup admin_panel admin-panel import adminpanel user_import /admin_panel/user_import admin_control admincontrols admin-controls admin_controls control controls admin admins deliver-to-victim imagefile blog_images blog_image /admin_controls/metrics/admin-image/ /admin_controls/metrics/blog_images/ /metrics/admin-image/ metrics submit metric exam apps app strut struts del james kettle delete apache Apache bscp blog-image blogimage blog_image admin-image admin_image adminimage change change-email change_email change-password change_password changepassword changeemail changeemail.js update patch update-email updateemail update_email users add_users removeuser remove-user remove_user secret secretkey secret_key home carlos product productcatalog products /image/productcatalog/products/ Burp Suite Certified Practitioner all-labs