From 4a66c0fff903af4c40a60a3184a717e14fc6b709 Mon Sep 17 00:00:00 2001
From: buggysolid <buggysolid@bugbounty.club>
Date: Wed, 20 Jul 2022 12:20:09 +0100
Subject: [PATCH] More endpoints and a graphql scheme discover query.

---
 actions.txt |  2 ++
 graphql.txt |  1 +
 http.txt    | 34 ++++++++++++++++++++++++++++++++++
 objects.txt | 15 +++++++++++++++
 4 files changed, 52 insertions(+)
 create mode 100644 graphql.txt

diff --git a/actions.txt b/actions.txt
index 175f6e4..526bcf5 100644
--- a/actions.txt
+++ b/actions.txt
@@ -12,6 +12,8 @@ new
 password-change
 password-reset
 register
+retrieve
+retrieve_or_create
 search
 send-verification-email
 show
diff --git a/graphql.txt b/graphql.txt
new file mode 100644
index 0000000..489bc43
--- /dev/null
+++ b/graphql.txt
@@ -0,0 +1 @@
+{__schema{types{name,kind,description,fields{name,type{name}}}}}
diff --git a/http.txt b/http.txt
index b3766f0..414f546 100644
--- a/http.txt
+++ b/http.txt
@@ -1,21 +1,36 @@
 ._darcs
+.build
 .bzr
 .chef
 .chef/credentials
 .config
+.config/
+.core
 .env
 .git
+.gitconfig
 .hg
+.hta
+.htaccess
+.htpasswd
+.htpasswd-old
+.htpasswd_test
 .kube
 .kube/config
 .secret
 .secrets
 .svn
 .terraform
+.tmp
 .well-known
+.well-known/enterprise-network-security
+.well-known/host-meta
+.well-known/host-meta.json
 .well-known/jwks.json
+.well-known/matrix
 .well-known/oauth-authorization-server
 .well-known/openid-configuration
+.well-known/uma2-configuration
 /.well-known/openid-configuration
 /api/auth-ui/v2/
 /api/v1/config
@@ -23,6 +38,7 @@
 1.1
 2.0
 2.2
+2fa
 API
 Account/Login
 AppConfig
@@ -31,13 +47,17 @@ _
 admin
 airflow.cfg
 ajax
+ajax/legacy_graphql
 ajax/metrics
+ajax/settings
 android_manifest.json
 api
 api-docs
 api/1
 api/18
 api/2.0
+api/mobile
+api/profile
 api/public
 api/public/v2
 api/rest
@@ -62,7 +82,9 @@ config
 config/credentials.yml.enc
 config/slack.yml
 core
+coupons
 credentials.yml
+dashboard
 debug
 debugger
 docs
@@ -82,14 +104,22 @@ jwks
 jwks.json
 kube_config_cluster.yaml
 kustomization.yaml
+legacy
 login
+lookup
 main.tf
 manifest.json
 master.key
 me
 metrics
+mobile
 notifications
+oauth
 oauth-callback
+oauth/discovery/keys
+oauth/introspection
+oauth/userinfo
+old
 openid
 openid/register
 password.txt
@@ -101,11 +131,13 @@ registration
 rest
 rest/api/2
 rest/api/2/
+risk
 robots.txt
 saml2/idp/sso
 script
 secret.yaml
 server-status
+sessions
 settings
 spec3.json
 spec3.yaml
@@ -121,8 +153,10 @@ user/v1/session
 username.txt
 uwsgi.ini
 v1
+v1/accounts
 v1/api
 v1/api/
+v1/customers
 v2
 v2/api
 v2/swagger.json
diff --git a/objects.txt b/objects.txt
index b762fda..9e0e5e2 100644
--- a/objects.txt
+++ b/objects.txt
@@ -2,11 +2,15 @@
 _ajax
 access_token
 account
+accounts
 actions
 activities
 activity
+apikeys
+apikeys_new
 attachments
 avatars
+billing_portal
 bookmarks
 campaigns
 cart
@@ -20,6 +24,7 @@ collector
 comments
 config
 configuration
+coupons
 credit_report
 customers
 direct_v2
@@ -42,6 +47,9 @@ guest
 images
 inboxes
 invoice
+invoiceitems
+item
+items
 lists
 live
 me
@@ -51,16 +59,22 @@ metadata
 metrics
 movies
 newsletters
+notes
 notifications
 oauth
 onboarding
+onboarding_task_list
 page-templates
+payment
+payment_methods
+payments
 preferences
 profile
 projects
 proxy
 pub
 public
+quotes
 realms
 realtime
 refresh_access_token
@@ -76,6 +90,7 @@ snapshots
 stats
 status
 statuses
+subscriptions
 templates
 tracking
 user