added some xpath payloads

Added some more methods found in the wild

added some new lines

added HTTP response header field names

removed typO

http-request-header-field-names (from wikipedia)

add some more common windows files to the LFI play loads

Add Filezilla password file to common windows files LFI payload

Added a list of common interesting windows files to use with local file inclusion exploitation

Added deferent encoding techniques for the & character