kali字典目录

rockyou.txt:
/usr/share/wordlists/rockyou.txt
这是一个非常著名的密码破解字典，包含超过 1400 万条真实密码数据，广泛应用于暴力破解和字典攻击。

php-reverse-shell.php:
/usr/share/webshells/php/php-reverse-shell.php
访问页面反弹shell，需要更改IP地址和端口

目录扫描
/usr/share/wordlists/SecLists/Discovery/Web-Content/rectory-list-2.3-big.txt

各种目录的路径（可以FUZZ）
/usr/share/wordlists/SecLists/Fuzzing/LFI/
Linux：
/usr/share/wordlists/SecLists/Fuzzing/LFI/LFI-gracefulsecurity-linux.txt

vim /etc/ssh/sshd_config //查看用户能不能使用ssh的文件 //ssh #PasswordAunthentication yes吧#的注释去掉
https://www.cnblogs.com/lzp110119/p/17198895.html //root使用xshell登录
/etc/init.d/sshd restart //服务重启

/var/log/nginx/access.log //nginx日志
/var/log/nginx/error.log

/etc/resolv.conf //DNS服务器配置（kali）
/etc/hosts //主机名映射到IP地址，从而实现快速访问和解析

• /usr/share/wordlists/dirb/big.txt
• /usr/share/wordlists/dirb/common.txt
• /usr/share/wordlists/dirb/small.txt
• /usr/share/wordlists/dirb/extensions_common.txt
• /usr/share/wordlists/dirbuster/directory-list-2.3-*.txt
• /usr/share/wordlists/dirbuster/directory-list-1.0.txt
• /usr/share/wordlists/SecLists/Fuzzing/LFI/LFI-gracefulsecurity-linux.txt