About

Очень настойчиво хотят в админку))

• /ru/admin/login.html
• /administrator/
• /administrator/index.php
• /admin/view
• /admin/log
• /admin/cms/login/
• /admin/login.php
• /admin.php
• /adminer.php
• /admin/fileupload/index.php
• /boaform/admin/formLogin
• /admin
• /admin.php
• /adm/
• /_eadmin/
• /edc_admin

Когда у тебя не wp))

• /wp-login.php
• /wp-admin
• /wp-admin/admin-ajax.php
• /wp-content/db-cache.php
• /wp-config.php, *-bak, *.orig, *0, 1, ..., 9 и тд
• /_wpeprivate/config.json
• /wp-content/plugins/adaptive-images/adaptive-images-script.php (?)
• // {sito|web|cms|wp и тд} /wp-includes/wlwmanifest.xml

Но чаще всего, ищут доступ к бд, и это ток малая часть, а сколько ещё вариантов...

• /phpMyadmin/index.php
• /phppma/index.php
• /pma/index.php
• /db/myadmin/index.php
• /shopdb/index.php
• /PMA2016/index.php
• /sql/webdb/index.php
• /sql/sqlweb/index.php
• /database/index.php
• /mysql-admin/index.php
• /mysql/pMA/index.php

Другие

• /assets/elfinder/connectors/php/connector.php
• /assets/plugins/jqueryupload/server/php/index.php
• /fckeditor/editor/filemanager/connectors/php/upload.php
• //assets/images/accesson.php
• /public/assets/fileupload/index.php
• /public/assets/uploadify/uploadify.css
• /index.php/component/users/
• /varvara.php (?)
• //xmlrpc.php
• /gb.php
• /yybbs.cgi, seo-joy.cgi, light.cgi
• /.env, /vendor/.env, /storage/.env
• /HNAP1/
• /_ignition/execute-solution
• /invoker/readonly
• /TP/html/public/index.php
• /TP/index.php
• /TP/public/index.php
• /shell
• /thinkphp/html/public/index.php
• /index.php/module/action/param1/${@die(md5(HelloThinkPHP))}