/Admin_files/
/DMR/
/StoreDB/
/WebShop/
/WebTrend/
/Web_store/
/webEdition/
/webedition/
/access/
/cms/
/cmsx/
/cmsx/upload.php
/cms/fileadmin/
/cms/fileadmin/log.txt
/account/
/accounting/
/administrator/
/ConsoleHelp/
/console/
/app/
/apps/
/archive/
/wi/
/wi/bin/
/system/
/system/bin/
/system/bin/upload/
/system/bin/binbackoffice/
/backoffice/
/bin/
/asp/
/demo/
/demonstration/
/atc/
/backup/
/bak/
/opt/
/opt/setupt/
/beta/
/bin/
/buy/
/buynow/
/c/
/cart/
/ccard/
/counter/
/credit/
/customers/
/userdata/
/Search
/~Account%20Name/Search
/snmpinit
/dat/
/data/
/chat/data/
/chat/data/usr/
/database/
/db/
/dbase/
/doc-html/
/docs/
/down/
/download/
/downloads/
/aspSmartUpload/
/cmsupload/
/cmsuploads/
/cms-uploads/
/cms-up/
/cmsup/
/img_upl/
/img_upload/
/images_upload/
/images_upl/
/upload-docs/
/upload-********s/
/upload-files/
/uploadfiles/
/uploadtemp/
/upload-temp/
Kaynak: http://www.sanalforum.biz/web-hack/70815-sitede-olan-butun-aciqlar.html
/uploadtmp/
/upload-tmp/
/admin/dateiupload.php
/admin/dateiverwaltung.php
/dateiverwaltung.php
/dateiupload.php
/tmpupload/
/tempupload/
/tmp-upload/
/temp-upload/
/upload2.htm
/upload2.html
/upload/
/uploads/
/upload/
/uploading/
/employees/
/wartung/
/support/
/exe/
/file/
/files/
/forum/
/fpadmin/
/ftp/
/ftpfiles/
/guestbook/
/guests/
/home/
/htdocs/
/html/
/ibill/
/idea/
/ideas/
/incoming/
/info/
/install/
/installfiles/
/install-files/
/intranet/
/intra/
/jave/
/jdbc/
/lib/
/library/
/login/
/log/
/logfiles/
/mail/
/mall_log_files/
/manual/
/marketing/
/msql/
/new/
/newfiles/
/old/
/oldfiles/
/odbc/
/old/
/oracle/
/postgres/
/postgresql/
/order/
/orders/
/outgoing/
/pages/
/password/
/passwords/
/perl/
/private/
/pub/
/public/
/purchase/
/purchases/
/pw/
/register/
/registered/
/reseller/
/retail/
/root/
/sales/
/setup-files/
/setup_files/
/setup/
/shop/
/shopper/
/site/iissamples/
/software/
/source/
/src/
/srcfiles/
/sql/
/support/
/tmp/
/tmpfiles/
/temp/
/tempfiles/
/test/
/testfiles/
/tst/
/tstfiles/
/tstsite/
/testsite/
/test-cgi/
/tools/
/tree/
/updates/
/usage/
/user/
/users/
/web/
/web800fo/
/webadmin/
/board/docs/
/webboard/
/webdata/
/website/
/www/
/www-sql/
/wwwjoin/
/******/
/zipfiles/
/zip/
/zips/
/session/
/session.jsp
/session.jhtml
/session.php
/session.phps
/session.asp
/session.aspx
/session.pl
/cgi-bin/session.pl
/cgi-bin/xxxnonexistingyy.pl
/cgi-bin/xxxnonexistingyy.exe
/cgi-bin/xxxnonexistingyy.bat
/cgi-bin/xxxnonexistingyy.jsp
/session.py
/sessions
/sessions.jsp
/sessions.jhtml
/sessions.php
/sessions.phps
/sessions.asp
/sessions.aspx
/sessions.pl
/cgi-bin/sessions.pl
/sessions.py
/cgi-bin/
/cgi-local/
/cgi-win/
/cgi-home/
/cgi/
/dyn/
/dynamic/
/sbin/
/include/
/includes/
/inc/
/java/
/config/
/admin/
/_admin/
/__admin/
/Admin/
/./admin/
/administration/
/Administration/
/info/
/stat/
/stats/
/status/
/express/cache/
/usage/
/private/
/priv/
/internal/
/priv/
/shtml/
/debug.txt
/debug.log
/dbg.txt
/dbg.log
/xsql/java/demo/
/../../shadow
/remote_login.pl%20
/WebSTAR%20LOG
/index.search
/.dS_store
/webstar.log
/logs/webstar.log
/pi_admin.admin
/test.php3
/info.php3
/ptsite/news.inc
/news.inc
/objcheck.asp
/******s/objcheck.asp
/include/sql.php
/include/sql.inc
/include/db.inc
/include/news.inc
/include/database.inc
/include/data.inc
/include/functions.inc
/inc/sql.inc
/inc/sql.inc
kolay gelsin.