gossan-hidden 0.3.0

# Gossan hidden directory brute-force wordlist
# Expanded for ffuf-level coverage

# Admin / Management
admin
administrator
admin1
admin2
admins
manage
management
manager
mgmt
panel
control
controlpanel
cpanel
backend
backoffice
dashboard
dash
console
portal
login
signin
signout
logout
register
signup
auth
sso
oauth
saml
ldap

# APIs
api
api-docs
apidocs
api-doc
swagger
swagger-ui
swagger.json
openapi
openapi.json
graphql
graphiql
v1
v2
v3
rest
rpc
soap
ws
websocket
webhooks
hooks
events
feed

# Development / CI-CD
dev
development
test
testing
qa
staging
stage
uat
sandbox
demo
alpha
beta
canary
preview
preprod
pre-prod
ci
cd
jenkins
gitlab
github
bitbucket
nexus
artifactory
sonarqube
build
pipeline
terraform
ansible
puppet
chef

# Configuration / Secrets
config
configuration
settings
setup
install
.env
.env.local
.env.production
.env.staging
.env.development
.env.test
config.json
config.yaml
config.yml
settings.json
secrets
secret
credentials
keys
tokens
pass
passwords
.htaccess
.htpasswd
web.config
application.ini
php.ini
httpd.conf
nginx.conf
.dockerconfigjson
.kube
.kubectl

# Source code / Version control
src
source
sources
code
repo
repository
git
.git
.svn
.hg
.cvs
.bzr
.gitconfig
.gitignore
.gitattributes
Dockerfile
docker-compose.yml
docker-compose.yaml
Makefile
makefile
package.json
cargo.toml
composer.json
composer.lock
pom.xml
build.gradle
requirements.txt
Pipfile
Gemfile
yarn.lock
package-lock.json

# Database / SQL
db
database
data
sql
mysql
postgres
mongodb
redis
cassandra
dump
backup.sql
dump.sql
database.sql
db.sql
schema.sql
migrate
migrations

# Files / Storage
files
file
upload
uploads
download
downloads
export
imports
media
assets
static
resources
storage
s3
bucket
blob
cdn
archive
archives
zip
zips
tmp
temp
backup
backups
bak
old
mirror
replica
copy
clone

# Logs / Monitoring
logs
log
error_log
access_log
server.log
app.log
debug.log
trace
metrics
prometheus
grafana
kibana
health
healthz
ready
live
status
ping
version
info
diagnostics
monitor
monitoring
apm
telemetry

# Mail / Communication
mail
email
webmail
smtp
pop
imap
mx
exchange
newsletter
lists
mailman
roundcube
squirrelmail
zimbra

# Network / Infrastructure
dns
ns
nameserver
gateway
router
proxy
vpn
firewall
loadbalancer
lb
vip
switch
nic
wan
lan
wlan

# Content Management
wp-admin
wp-content
wp-includes
wp-json
xmlrpc.php
administrator
joomla
drupal
magento
prestashop
shopify
wordpress
phpmyadmin
phpmyadmin2
pma
myadmin
mysqladmin
sqlmanager

# Help / Support
help
faq
support
ticket
tickets
contact
about
terms
privacy
policy
legal
copyright
license
eula
docs
documentation
wiki
kb
knowledgebase
forum
forums
community
blog
news

# Testing / Debug
test
tests
phpinfo.php
info.php
phpinfo
xdebug
phpmyinfo
server-info
server-status
trace.axd
elmah.axd
sitemap.xml
sitemap.txt
sitemap
robots.txt
crossdomain.xml
clientaccesspolicy.xml
.htpasswd
.htaccess

# Common application paths
app
apps
application
service
services
microservice
ms
core
platform
worker
workers
job
jobs
queue
queues
broker
scheduler
cron
task
tasks
batch
pipeline
workflow

# E-commerce / Business
shop
store
cart
checkout
order
orders
payment
payments
billing
invoice
invoices
subscription
subscriptions
plan
plans
pricing
catalog
product
products
inventory
warehouse
shipping
delivery
crm
erp
pos

# Security / Compliance
security
secure
private
restricted
confidential
classified
internal
corp
corporate
extranet
intranet
audit
compliance
risk
penetration
pentest
vuln
vulnerability
scan
scanner
siem
soc
ids
ips
waf
ca
certificate
certs
pki
ssl
tls

# Miscellaneous
search
cache
cdn
edge
node
cluster
pool
farm
grid
cloud
onprem
hybrid
server
servers
host
hosts
vm
vms
container
containers
pod
pods
namespace
ns
org
orgs
org-id
tenant
tenants
project
projects
customer
customers
client
clients
user
users
account
accounts
profile
profiles
member
members
team
teams
group
groups
role
roles
permission
permissions
policy
policies
rule
rules