Directory listing for /work/scratch/

• 01a1c4c7-bfd5-777c-b2ec-57dc3fe9639e.xml
• 01a1c5f0-c745-74d5-aa61-9c6046004258.xml
• absolute-form/
• acc-vertriebsservice.baloise.de.urls
• acme-config/
• acme-logs/
• acme-webroot/
• acme-work/
• admin-traffic.txt
• aes-sso-password-results.jsonl
• aes-sso-passwords.txt
• aes_sso_password_probe.py
• airlock-all-properties.txt
• airlock-audit/
• airlock-cert-spoof/
• airlock-critical-sinks-extended.txt
• airlock-dangerous-sinks.txt
• airlock-flow-probe.py
• airlock-header-grep.txt
• airlock-i18n-path-traversal.py
• airlock-port4401-ext-prefix-host-parity-v1.txt
• airlock-port4401-ext-prefix-host-parity-v2.txt
• airlock-port4401-ext-prefix-host-parity-v3.txt
• airlock-requestauth-files.txt
• airlock-route-catalogue.txt
• airlock-session-grep.txt
• airlock-sso-doc.html
• airlock-techreg-files.txt
• ajp-cping-results.jsonl
• ajp-cping.py
• all-authserver-search.txt
• all-jwk-paths.json
• analyze_saml.py
• apache-abs.b
• apache-abs.err
• apache-abs.h
• apache-connect.b
• apache-connect.err
• apache-connect.h
• apache-proxy-marker.txt
• api-admin-password.body
• api-admin-password.headers
• api-admin-password.stderr
• api-all-paths.txt
• api-archived.txt
• api-baloise-server.pem
• api-crossvip.jsonl
• api-forward-proxy-results.jsonl
• api-paths.json
• api-proxy-absolute_http_loop.bin
• api-proxy-absolute_https_loop.bin
• api-proxy-absolute_https_target.bin
• api-proxy-connect_localhost_8443.bin
• api-proxy-connect_loop_9443.bin
• api-proxy-connect_target_9443.bin
• api.baloise.de-urls.txt
• api.baloise.de.urls
• api2-all-paths.txt
• api2-archived.txt
• api2-paths.json
• api2.baloise.de-urls.txt
• api2.baloise.de.urls
• api_forward_proxy_probe.py
• apkpure-scout.html
• app-access-urls.tsv
• app-step-matrix.tsv
• app_step_matrix.py
• archived/
• auth-resources.txt
• auth.wadl
• authentication-wadl-decoded.xml
• authentication-wadl.xml
• axis-control.xml
• axis-path-bypass-all.jsonl
• axis-path-bypass-summary.txt
• axis-rce.py
• axis-routing-and-delivery.md
• axis-va-4401.log
• axis-va-7443.log
• axis-va-7980.log
• axis-va-8080.log
• axis-va-8343.log
• axis-va-8443.log
• axis-va-9443.log
• axis-va-run.log
• axis-va-variant-results.txt
• axis-va-variants.txt
• axis_path_bypass_sweep.py
• balgroupit-body-search.tsv
• balgroupit-cert-names.txt
• balgroupit-hostsearch.txt
• balgroupit-passive-names.txt
• balgroupit-rapiddns.out
• balgroupit-search.txt
• balgroupit-sonar.out
• balgroupit-subdomaincenter.out
• balgroupit-urlscan.out
• balgroupit-wayback.out
• baloise-org-repos.json
• base.body
• base.hdr
• bcf9b29a628a.cgi.body
• bcf9b29a628a.cgi.err
• bcf9b29a628a.cgi.hdr
• browser/
• bugbank/
• c618aab9c7e0.cgi.body
• c618aab9c7e0.cgi.err
• c618aab9c7e0.cgi.hdr
• certprobe/
• cf-critical-ports.txt
• cf-critical-results.txt
• cf-port-results.txt
• check_auth_buttons.py
• cjar
• config-j61hrn-ui-rules-v14.zip
• connect-proxy/
• connect-samehost/
• continuation-files.txt
• critical-prod-fullports.txt
• cross-jwt/
• cross-vhost/
• crossvip_scan.py
• CSRFT759.js
• data_edit_probe.py
• dcr-bugbounty-dwbzn-nonexistent.body
• dcr-bugbounty-dwbzn-nonexistent.err
• dcr-default.body
• dcr-default.err
• dcr-portal_ao.body
• dcr-portal_ao.err
• dcr-sas_va.body
• dcr-sas_va.err
• dcr-venta.body
• dcr-venta.err
• dcr3-bugbounty-dwbzn-nonexistent.body
• dcr3-bugbounty-dwbzn-nonexistent.err
• dcr3-default.body
• dcr3-default.err
• dcr3-portal_ao.body
• dcr3-portal_ao.err
• dcr3-sas_va.body
• dcr3-sas_va.err
• dcr3-venta.body
• dcr3-venta.err
• DumpStaticStrings.class
• DumpStaticStrings.java
• dynamic_step_probe.py
• easylogin-baloise.html
• easylogin-dev-login.html
• easylogin-metadata/
• easylogin-public/
• easylogin-research/
• easylogin-saml-init/
• easylogin-selfreg.html
• easylogin-traffic.tsv
• el_account_linking-admin-esp.txt
• el_account_linking2-admin-esp.txt
• env-cookie-oracle/
• esp-su.txt
• esp-ticket-forge.py
• esp.meta
• esp.txt
• esp_live_probe.py
• esp_timing.py
• frontend-va-current/
• GatewayDefaultDispatcher.java
• gatewaymanagement-aar-classes.txt
• gh-code-0.snapshot
• gh-code-1.snapshot
• gh-code-10.snapshot
• gh-code-11.snapshot
• gh-code-12.snapshot
• gh-code-13.snapshot
• gh-code-14.snapshot
• gh-code-15.snapshot
• gh-code-16.snapshot
• gh-code-2.snapshot
• gh-code-3.snapshot
• gh-code-30.snapshot
• gh-code-31.snapshot
• gh-code-32.snapshot
• gh-code-33.snapshot
• gh-code-34.snapshot
• gh-code-35.snapshot
• gh-code-36.snapshot
• gh-code-37.snapshot
• gh-code-38.snapshot
• gh-code-4.snapshot
• gh-code-5.snapshot
• gh-commits/
• github-api-baloise.snapshot
• github-api2-baloise.snapshot
• github-auth-search/
• github-auth-search-org/
• github-baloise/
• github-captured-pages/
• github-cert-search/
• github-guidewire/
• github-guidewire-product/
• github-gw-search/
• github-oim-search/
• github-org/
• github-policycenter-search.raw
• github-repo-search/
• github-repos/
• github-search/
• github-search-policy-balgroupit.snapshot
• github-transform-search.snapshot
• graphman-jwt-live/
• grepapp/
• grepapp-layer7/
• grepapp-warp/
• guidewire-candidates.txt
• guidewire-cloud/
• guidewire-default-detector.py
• guidewire-default.py
• guidewire-public/
• guidewire-resolved.txt
• guidewire-servlets-base.xml
• guidewire-su-bc-cc-results.jsonl
• gw-canonical-candidates.txt
• gw-canonical-resolved.txt
• gw-ingress-candidates.txt
• gw-ingress-valid.txt
• gw-loginapi/
• gw-systemtools-getrunlevel.xml
• gwde-alt-hostport/
• gwde-alt80-hostport/
• gwde-archived-current.txt
• gwde-archived.txt
• gwde-crossvip.jsonl
• gwde-desync-clte.bin
• gwde-desync-results.txt
• gwde-desync-tecl.bin
• gwde-domain-login-bare-result.jsonl
• gwde-domain-login-canonical-result.jsonl
• gwde-domain-login-canonical.py
• gwde-domain-login-result.jsonl
• gwde-domain-login.py
• gwde-fullport/
• gwde-gosu-auth/
• gwde-h2-desync-results.jsonl
• gwde-host-probe.sh
• gwde-http-control.body
• gwde-http-control.err
• gwde-http-control.hdr
• gwde-http-forwarded.body
• gwde-http-forwarded.err
• gwde-http-forwarded.hdr
• gwde-login.html
• gwde-maint.body
• gwde-maint.err
• gwde-maint.headers
• gwde-native-port-nmap/
• gwde-nosni.err
• gwde-nosni.hdr
• gwde-ports.txt
• gwde-servlet-probe/
• gwde-target-probe.sh
• gwde-te-comma_ci.bin
• gwde-te-comma_ic.bin
• gwde-te-dup_ci.bin
• gwde-te-dup_ic.bin
• gwde-te-obfuscation-results.json
• gwde-te-obfuscation-results.jsonl
• gwde-te-obsfold.bin
• gwde-te-space_colon.bin
• gwde-te-tab.bin
• gwde-te-trail.bin
• gwde-te-xchunked.bin
• gwde.baloise.de-crt.sh.json
• gwde.baloise.de-otx.alienvault.com.json
• gwde.baloise.de-urlscan.io.json
• gwde.headers
• gwde.jar
• gwde_desync_probe.py
• gwde_h2_desync_probe.py
• gwde_te_obfuscation_probe.py
• gwsrc/
• gwupdate-research/
• gwupdate-targeted-probe.jsonl
• h2-authority-results.jsonl
• h2_authority_probe.py
• i18n-arbitrary-oracle/
• i18n-de-package-probe.py
• i18n-de-package-results.jsonl
• i18n-en.json
• i18n-secret-hits.tsv
• i18n-targeted2-makler.jsonl
• i18n-tested.tsv
• i18n_secret_probe.py
• i18n_targeted_probe2.py
• infoportal-dcr-init.err
• infoportal-dcr-probe.tsv
• infoportal-dcr-probe2.tsv
• infoportal-dcr-probe3.tsv
• infoportal-dcr.cookies
• infoportal.baloise.de.archived
• infoportal.baloise.de.prot.body
• infoportal.baloise.de.prot.cookies
• infoportal.baloise.de.prot.err
• infoportal.baloise.de.prot.hdr
• jar-resources.tsv
• javap/
• JoseConfusionTest.class
• JoseConfusionTest.java
• jsonws-urls.tsv
• jwks.body
• jwks.headers
• jwtconf/
• l7-fastjson.json
• l7-jackson.json
• l7-marker.txt
• l7-poly-marker.txt
• l7-poly.body
• l7-poly.err
• l7-snakeyaml.yaml
• l7-xxe.body
• l7-xxe.err
• l7-xxe.xml
• layer7-audit/
• layer7-builtin-api-2124.tsv
• layer7-builtin-api.tsv
• layer7-builtin-probe.sh
• layer7-cert/
• layer7-cert-header-results.jsonl
• layer7-critical-classes.txt
• layer7-critical-source.txt
• layer7-decompiled-graphman.txt
• layer7-gatewayjar-critical.txt
• layer7-graphman-policy-search.txt
• layer7-jar-classes.txt
• layer7-oauth-strings.txt
• layer7-public-strings.txt
• layer7-restman-routes-rbac.txt
• layer7-root-restman.txt
• layer7-static-strings.txt
• layer7_cert_header_probe.py
• liferay-critical/
• liferay-prefix-paths.txt
• liferay-prefix-results.tsv
• live-alt-ports.tsv
• makler-flow/
• makler-frontend/
• maklerportal.baloise.de.archived
• maklerportal.baloise.de.prot.body
• maklerportal.baloise.de.prot.cookies
• maklerportal.baloise.de.prot.err
• maklerportal.baloise.de.prot.hdr
• mein-archived.txt
• mein-portal.baloise.de.prot.body
• mein-portal.baloise.de.prot.cookies
• mein-portal.baloise.de.prot.err
• mein-portal.baloise.de.prot.hdr
• method-auth-bypass/
• mine-mein.json
• mtls/
• network-sinks.txt
• next/
• nmap-odd.txt
• oauth-as-candidates-small.txt
• oauth-as-candidates.txt
• oauth-as-hits-small.json
• oauth-as-hunt-small.out
• oauth-as-hunt.out
• oauth-as-urls.tsv
• oauth-paths.txt
• oauth-requesturi.txt
• oauth-test.tsv
• oauth2i-confusion/
• oauth_as_hunt.py
• oauth_as_hunt_small.py
• OAuthIntrospectorVerifyTest.class
• OAuthIntrospectorVerifyTest.java
• ocs-host-full.txt
• ocs-paths.json
• ocs-ports.txt
• ocs-urls.txt
• oim-altports.jsonl
• oim-skip-current/
• oim_altports.py
• oneshot-escape-results.tsv
• oneshot-paths.txt
• oneshot-rest.tsv
• oneshot_escape_fuzz.py
• operator-blobs.txt
• otkcustom-marker.txt
• otkcustom-paths.txt
• otkcustom-results.txt
• outbound-sinks.txt
• owned-extract/
• owned-layout-1.txt
• owned-layout-2.txt
• owned-layout-3.txt
• owned-lib-list/
• owned-loginapp-lib.txt
• passive-sas/
• password-reset-source.txt
• pc-env-20k.txt
• pc-env-resolved.txt
• pc-env-single-resolved.txt
• pc-env-single.txt
• pki-web-search/
• portal-selector.txt
• ports-probe.txt
• probe-tech-client-ids.py
• protected-requestauth-probe.jsonl
• protected_requestauth_probe.py
• proxy-marker.txt
• proxychains-mullvad-ch.conf
• public-code-search/
• public-graphman-refs.txt
• public-research/
• registration-archived-urls.txt
• registration-grep.txt
• registration_probe.py
• registration_probe2.py
• requestauth-files.txt
• restappconfigs.txt
• restman-auth-bypass-all.jsonl
• restman-auth-bypass-summary.txt
• restman_auth_bypass_sweep.py
• richfaces-urls.tsv
• routes.txt
• saml-all.json
• saml-analysis.txt
• saml-context-urldns.b64
• saml-context-urldns.bin
• saml-correct-attr/
• saml-historical-extracted/
• saml-id-chunk-00
• saml-id-chunk-01
• saml-id-chunk-02
• saml-id-chunk-03
• saml-id-chunk-04
• saml-ids.txt
• saml-paths-all.txt
• saml-posts-detailed.tsv
• saml-transform.tsv
• saml-urldns-marker.txt
• saml-x-0.json
• saml-x-1.json
• saml-x-2.json
• saml-x-3.json
• saml-x-4.json
• saml-xsw/
• sas-403-bypass/
• sas-passive/
• sas-pinned-http/
• sas-pinned-ports/
• sas-pinned-vhost/
• saved/
• selector-candidates.txt
• selector-hits.json
• selector-hunt.out
• selector_hunt.py
• sensitive-configs.txt
• ServerGatewayGraphQLAssertion.javap
• si-portal.baloise.de.archived
• smuggle-clte-case.bin
• smuggle-clte-space.bin
• smuggle-clte-tab.bin
• smuggle-clte-x.bin
• smuggle-clte.bin
• smuggle-pipeline.bin
• smuggle-tecl.bin
• smuggle_probe.py
• sourcegraph/
• sourcegraph-gw/
• spoof.body
• spoof.hdr
• ssi.tsv
• sso-decoder-fingerprint.jsonl
• sso-format-results.jsonl
• sso_decoder_fingerprint.py
• sso_format_probe.py
• starttask-methods/
• subdomains-20k.txt
• svl-de-iamp616-urlscan.io.json
• svl-de-iamp616.balgroupit.com-urlscan.io.json
• swissdec/
• swissdec-old-cert-curl.log
• swissdec-old-cert-response.bin
• tech-client-contracts.txt
• test-api-default.md
• test-api-otk.md
• test-gw-airlock.md
• test-gw-default.md
• test-vertriebsservice.baloise.de.urls
• test_al_control.py
• test_esp_guidewire.py
• test_esp_linking.py
• test_esp_su.py
• test_guidewire_flow_jumps.py
• test_guidewire_iam_default.py
• test_guidewire_iam_default_bc_cc.py
• test_sso_decoders.py
• tgic/
• tgic-docs/
• tgic-ists/
• tgic-pki/
• ticket-refs.txt
• titus/
• titus-baloise/
• tokenexchange-files.txt
• tomcat-cve.py
• tomcat-get.body
• tomcat-get.err
• tomcat-put.body
• tomcat-put.err
• tomcat-write-marker.txt
• tools/
• transform-wadl.body
• transform-wadl.xml
• ui-rules-v13/
• ui-rules-v14/
• ui-v14-activate.body
• ui-v14-activate.hdr
• ui-v14-upload.body
• ui-v14-upload.hdr
• upload_airlock_v14.py
• va-8561-giop-nmap.txt
• va-all-paths.txt
• va-archived-current.txt
• va-archived-now.txt
• va-asid-enum2.json
• va-asid-enum2.jsonl
• va-asid-enum3-all.jsonl
• va-asid-enum3.json
• va-asid-enum3.jsonl
• va-asid-enum3b.jsonl
• va-asid-remaining.txt
• va-auth-server-id-enum.jsonl
• va-contracts.txt
• va-critical-path-results.txt
• va-critical-paths.txt
• va-crossip-results.txt
• va-crossip-results2.txt
• va-crossip.sh
• va-default-login-results.jsonl
• va-env-cookie-cors-oracle/
• va-frontend-current/
• va-host-confusion.jsonl
• va-host-current.txt
• va-host-full.txt
• va-iam-custom.pretty.js
• va-mtls-header-invalid.jsonl
• va-native-fingerprint/
• va-paths.json
• va-portal-redirect-activation.jsonl
• va-ports.txt
• va-redirects.json
• va-saml-pubca-matrix/
• va-saml-pubca-matrix.py
• va-saml-transform-wadl.xml
• va-sas-native-connect.jsonl
• va-sas-native-connect.py
• va-sas-native-nmap.txt
• va-sas-port-nmap/
• va-sas-put-upload/
• va-sas-trusted-identity/
• va-scan-vips.tsv
• va-urls.txt
• va-wadl/
• va-wadl-audit/
• va.baloise.de-crt.sh.json
• va.baloise.de-urlscan.io.json
• va_activate_portal_redirect.py
• va_asid_enum2.py
• va_asid_enum3.py
• va_asid_enum_parallel.py
• va_crossip.py
• va_default_login.py
• va_scan_vips.py
• vertriebsservice.baloise.de.archived
• vertriebsservice.baloise.de.urls
• vhost-pins.txt
• wifi-195.145.1.24-internetdb.json
• x/
• zeus-portal.baloise.de.archived