Robots

Any thoughts or speculation on these? What's averagejoes? Graving to avoid controversial research.

/admingossip.php
/advsearch.php
/airstrip.php
/amarket.php
/ammo.php
/announce.php
/apartment19.php
/apartmentcomplex.php
/applications.php
/attackend.php
/attacklog.php
/attacklogs.php
/attack.php
/attackset.php
/attack-sidebar.php
/authenticate.php
/averagejoes.php
/averagejoespurchace.php
/awards.php
/badwords.php
/bank.php
/bars.php
/bazaar.php
/bbcode.php
/bensbasement.php
/bensbasementpurchace.php
/bigalgunshop.php
/blackjack.php
/blacklist.php
/bookie.php
/bugreport.php
/buyarmour.php
/buyweapon.php
/Cache.php
/carinfo.php
/carsuperbuy.php
/carthingyshop.php
/casino.php
/cesdonate.php
/charity.php
/chat2.php
/chathelp.php
/chessCheck.php
/chessgame.php
/chess.php
/chesswindow.php
/city.php
/citystats.php
/torn
/cod.php
/companies.php
/companyspecials.php
/competitioncomicstrip.php
/competitiondogtags.php
/competitioneaster.php
/competitionmrmiss.php
/competitionvotecounting.php
/competitionworldwar.php
/competitionzombies.php
/complaints.php
/connectionForPokerTest.php
/connection.php
/crimes.php
/criminalrecords.php
/dayvote.php
/deletepost.php
/dirtyshow.php
/displaycase.php
/display.php
/divorce.php
/docrime1.php
/docrime2.php
/docrime3.php
/docrime4.php
/docrime.php
/dollarsale.php
/donatorcancel.php
/donatordone.php
/donatorissues.php
/donator.php
/downtime.php
/do-your-part-continued.php
/do-your-part.php
/drugdonate.php
/dump.php
/ebuyarmour.php
/edit1.php
/edit2.php
/edit.php
/education.php
/eevents.php
/eiteminfo.php
/elderlyhome.php
/epeople.php
/equip.php
/erevive.php
/estateagents.php
/events.php
/example.php
/facdonate.php
/facissues.php
/facstaff.php
/factions.php
/fans.php
/favicon.ico
/fedreport.php
/firewalk.php
/fonts.php
/forumreport.php
/forumsearch.php
/friendlist.php
/fsearch.php
/gdtest9.php
/gdup.php
/gossipedit.php
/gossip.php
/gym.php
/gyms.php
/hack.php
/halloffame.php
/hallowexp.php
/hallow.php
/helpapp.php
/help.php
/highcasino.php
/highlow.php
/highlowpot.php
/home.php
/horoscopes.php
/hospitalfonts.php
/hospital.php
/hospitalview.php
/ignorelist.php
/imageuploadNew.php
/imageupload.php
/imarket_my.php
/imarket.php
/info.php
/ircgadminedit.php
/ircguidelines.php
/ircquotes.php
/itembuy.php
/item.php
/itemsend.php
/itemusedb.php
/itemuseparcel.php
/itemuse.php
/iwin.php
/jail1.php
/jailescape.php
/jailfonts.php
/jail.php
/jailview.php
/joblist.php
/jobpromote.php
/jobspecial.php
/jobs.php
/lag-generator.php
/laptop4.php
/laptop.php
/leaving.php
/level2.php
/level.php
/library.php
/listen.php
/loader.php
/loan.php
/lockthread.php
/login.php
/logout.php
/lostpoints.php
/lu349dj4kgpale.php
/mailabuse.php
/makereport.php
/managerooms.php
/manual.php
/market.php
/marketsalesman.php
/meddonate.php
/merits.php
/messageinc2.php
/messageinc.php
/messages.php
/missions.php
/movethread.php
/multijail.php
/museum.php
/newpoll.php
/newsedit.php
/newspaper_top.php
/newtopic.php
/notebook.php
/organisedcrimes.php
/pagoda.php
/payments-paypal.php
/pc.php
/personalstats.php
/phpinfo.php
/playermanagement.php
/playerpolicies.php
/playerreport.php
/pmarket.php
/pointreport.php
/points2.php
/points4.php
/points5.php
/points6.php
/points7.php
/points8.php
/pointsell.php
/points.php
/poker1.php
/poker2.php
/pokerbot.php
/pokerCheck.php
/pokernews.php
/poker.php
/pokerplay.php
/pokerwindow2.php
/pokerwindow.php
/poststicky.php
/preferences.php
/privacypolicy.php
/properties.php
/proposals.php
/propose2.php
/propose3.php
/propose4.php
/propose.php
/qrace1.php
/qrace2.php
/qrace3.php
/qracemain.php
/qrace.php
/questionnaire.php
/quote.php
/race1.php
/race_drag1.php
/race_drag2.php
/race_drag3.php
/race_drifts1.php
/race_drifts2.php
/race_drifts3.php
/race_drifts4.php
/race_drifts.php
/raceedit.php
/race_endu1.php
/race_endu2.php
/race_endunew.php
/race_endu.php
/raceguide.php
/racemain1.php
/racemain.php
/racemanual.php
/race.php
/race_round01.php
/race_round02.php
/race_round03.php
/race_round04.php
/racetrfc.php
/radiobox.php
/radioinfo.php
/radioscrape.php
/ranks.php
/receivedevents.php
/reply.php
/resend2.php
/resend.php
/revive.php
/rewards.php
/roulette.php
/roulettewindow.php
/rules.php
/russianroulette.php
/savedevents.php
/savedmessages.php
/search.php
/sendcash.php
/server.info.txt
/shops.php
/sidebar.php
/sidebar.php2
/skyler.php
/smile.php
/smilies.php
/spy.php
/staff.php
/stockexchange.php
/stocktrend2.php
/stocktrend3.php
/stocktrendnewspaper.php
/stocktrend.php
/stocktrendpoints.php
/tacs.php
/tagged.php
/tcbb.php
/torn.php
/trackinfo.php
/trade.php
/travelagency.php
/unlockthread.php
/unsubscribe.php
/unusedpage.php
/upload.php
/usemedical.php
/userbar.php
/userbar-test2.php
/userbar-test3.php
/userbar-test.php
/userlist.php
/usersonline.php
/validating3.php
/validating4.php
/voteawg.php
/votempogd.php
/vote.php
/voteresults.php
/votetwg.php
/warnlogs.php
/woodygym.php
/woodygympurchace.php
/wordreplace.php
/xmasexp.php
/xmas.php
/xmastree.php
/crimes
/audio
/citywatch
/admin
/irc
/sounds
/jobs
/poker
/original
/casino
/includes
/test
/war.php

Valid URLS(Not reporting a 404):
VM963:371 https://www.torn.com/advsearch.php
VM963:371 https://www.torn.com/amarket.php
VM963:371 https://www.torn.com/ammo.php
VM963:371 https://www.torn.com/authenticate.php
VM963:371 https://www.torn.com/awards.php
VM963:371 https://www.torn.com/badwords.php
VM963:371 https://www.torn.com/bank.php
VM963:371 https://www.torn.com/bazaar.php
VM963:371 https://www.torn.com/bbcode.php
VM963:371 https://www.torn.com/bigalgunshop.php
VM963:371 https://www.torn.com/blacklist.php
VM963:371 https://www.torn.com/casino.php
VM963:371 https://www.torn.com/city.php
VM963:371 https://www.torn.com/citystats.php
VM963:371 https://www.torn.com/torn
VM963:371 https://www.torn.com/companies.php
VM963:371 https://www.torn.com/connection.php
VM963:371 https://www.torn.com/crimes.php
VM963:371 https://www.torn.com/criminalrecords.php
VM963:371 https://www.torn.com/displaycase.php
VM963:371 https://www.torn.com/donatordone.php
VM963:371 https://www.torn.com/donator.php
VM963:371 https://www.torn.com/dump.php
VM963:371 https://www.torn.com/education.php
VM963:371 https://www.torn.com/eiteminfo.php
VM963:371 https://www.torn.com/estateagents.php
VM963:371 https://www.torn.com/events.php
VM963:371 https://www.torn.com/factions.php
VM963:371 https://www.torn.com/fans.php
VM963:371 https://www.torn.com/favicon.ico
VM963:371 https://www.torn.com/fedreport.php
VM963:371 https://www.torn.com/friendlist.php
VM963:371 https://www.torn.com/gym.php
VM963:371 https://www.torn.com/halloffame.php
VM963:371 https://www.torn.com/home.php
VM963:371 https://www.torn.com/hospitalview.php
VM963:371 https://www.torn.com/imarket.php
VM963:371 https://www.torn.com/info.php
VM963:371 https://www.torn.com/item.php
VM963:371 https://www.torn.com/itemuseparcel.php
VM963:371 https://www.torn.com/jailview.php
VM963:371 https://www.torn.com/joblist.php
VM963:371 https://www.torn.com/jobs.php
VM963:371 https://www.torn.com/lag-generator.php
VM963:371 https://www.torn.com/laptop.php
VM963:371 https://www.torn.com/level2.php
VM963:371 https://www.torn.com/loader.php
VM963:371 https://www.torn.com/loan.php
VM963:371 https://www.torn.com/login.php
VM963:371 https://www.torn.com/logout.php
VM963:371 https://www.torn.com/messageinc2.php
VM963:371 https://www.torn.com/messageinc.php
VM963:371 https://www.torn.com/messages.php
VM963:371 https://www.torn.com/museum.php
VM963:371 https://www.torn.com/organisedcrimes.php
VM963:371 https://www.torn.com/pc.php
VM963:371 https://www.torn.com/personalstats.php
VM963:371 https://www.torn.com/playerreport.php
VM963:371 https://www.torn.com/pmarket.php
VM963:371 https://www.torn.com/points.php
VM963:371 https://www.torn.com/preferences.php
VM963:371 https://www.torn.com/properties.php
VM963:371 https://www.torn.com/resend2.php
VM963:371 https://www.torn.com/resend.php
VM963:371 https://www.torn.com/revive.php
VM963:371 https://www.torn.com/rules.php
VM963:371 https://www.torn.com/sendcash.php
VM963:371 https://www.torn.com/shops.php
VM963:371 https://www.torn.com/sidebar.php
VM963:371 https://www.torn.com/smilies.php
VM963:371 https://www.torn.com/staff.php
VM963:371 https://www.torn.com/stockexchange.php
VM963:371 https://www.torn.com/trade.php
VM963:371 https://www.torn.com/travelagency.php
VM963:371 https://www.torn.com/unsubscribe.php
VM963:371 https://www.torn.com/userlist.php
VM963:371 https://www.torn.com/usersonline.php
VM963:371 https://www.torn.com/casino
VM963:371 https://www.torn.com/war.php

Most of these are self evident

Averages Joes is the first gym unlock. I assume once you unlock it you start earning gym exp for further gyms.

Average Joes is a gym for the average folks. I heard one of their teams went to the top though. RIP Patches O'Houlihan.

umm... what do you mean, you ran a script to "check" these pages? check for what? are you looking for security vulnerabilities or something? Where did you get this list? what's the context for all this?

True - there are a few in there that are not as obvious. Curious to know if there is any insight or speculation on the more obscure pages.

It's from the robots text file.

obviously exposing my ignorance here, but what the f**k is "the robots text file"?

"If you can dodge traffic you can dodge a ball"

It is a file utilized in web development which tells web crawlers (think search engine) what they are/are not allowed to request access to. Here is Google’s developer page on the subject. It does not necessarily keep them hidden from search engines without additional configurations, but helps alleviate some traffic.

EDIT: OP, enumerating a website without permission could be viewed in a negative light. Be careful while learning to pentest and avoid using those tests on sites you don’t control.

it's a lot of old stuff. found a honor bar leak in there before they were easily available for retina rebuild.

Lag generator checks out.

you should visit it

the fed report gives you a glimpse of what fed looks like lmao

Most of those endpoints don't exist anymore. A lot of pretty old links have been left in the robots.txt.

P.S. Network requests to Torn (excluding the API and requests originating from the API) must come user interactions such as a button press with one request per interaction while the user is on the page the request should originate from.

SandyLoam.php

the truth is out there

Hey, just want to preface this by saying I work in gov cloud security & compliance - no pentesting has occurred. With that said, if Torn does not feel comfortable with this thread/topic, I am happy to remove it.

Moved to graveyard as per request (via discord)