| .. | ||
| api | ||
| BurpSuite-ParamMiner | ||
| CMS | ||
| Domino-Hunter | ||
| dutch | ||
| SVNDigger | ||
| trickest-robots-disallowed-wordlists | ||
| URLs | ||
| Web-Servers | ||
| Web-Services | ||
| AdobeCQ-AEM.txt | ||
| AdobeXML.fuzz.txt | ||
| aem2.txt | ||
| Apache.fuzz.txt | ||
| apache.txt | ||
| ApacheTomcat.fuzz.txt | ||
| axis.txt | ||
| big.txt | ||
| burp-parameter-names.txt | ||
| CGI-HTTP-POST-Windows.fuzz.txt | ||
| CGI-HTTP-POST.fuzz.txt | ||
| CGI-Microsoft.fuzz.txt | ||
| CGI-XPlatform.fuzz.txt | ||
| CGIs.txt | ||
| coldfusion.txt | ||
| combined_directories.txt | ||
| combined_words.txt | ||
| common-and-dutch.txt | ||
| common-and-french.txt | ||
| common-and-italian.txt | ||
| common-and-portuguese.txt | ||
| common-and-spanish.txt | ||
| common-api-endpoints-mazen160.txt | ||
| Common-DB-Backups.txt | ||
| Common-PHP-Filenames.txt | ||
| common.txt | ||
| common_directories.txt | ||
| CommonBackdoors-ASP.txt | ||
| CommonBackdoors-JSP.txt | ||
| CommonBackdoors-PHP.txt | ||
| CommonBackdoors-PL.txt | ||
| confluence-administration.txt | ||
| default-web-root-directory-linux.txt | ||
| default-web-root-directory-windows.txt | ||
| directory-list-1.0.txt | ||
| directory-list-2.3-big.txt | ||
| directory-list-2.3-medium.txt | ||
| directory-list-2.3-small.txt | ||
| directory-list-lowercase-2.3-big.txt | ||
| directory-list-lowercase-2.3-medium.txt | ||
| directory-list-lowercase-2.3-small.txt | ||
| dirsearch.txt | ||
| domino-dirs-coldfusion39.txt | ||
| domino-endpoints-coldfusion39.txt | ||
| dsstorewordlist.txt | ||
| elmah.txt | ||
| forefront-identity-management.txt | ||
| golang.txt | ||
| graphql.txt | ||
| hashicorp-consul-api.txt | ||
| hashicorp-vault.txt | ||
| hpsmh.txt | ||
| HTTP-POST-Microsoft.fuzz.txt | ||
| iis-systemweb.txt | ||
| IIS.fuzz.txt | ||
| JavaScript-Miners.txt | ||
| JavaServlets-Common.fuzz.txt | ||
| jboss.txt | ||
| Jenkins-Hudson.txt | ||
| keycloak.txt | ||
| KitchensinkDirectories.fuzz.txt | ||
| LinuxFileList.txt | ||
| local-ports.txt | ||
| Logins.fuzz.txt | ||
| LotusNotes.fuzz.txt | ||
| Microsoft-Frontpage.txt | ||
| netware.txt | ||
| nginx.txt | ||
| ntlm-directories.txt | ||
| oauth-oidc-scopes.txt | ||
| Oracle-EBS-wordlist.txt | ||
| oracle.txt | ||
| Oracle9i.fuzz.txt | ||
| OracleAppServer.fuzz.txt | ||
| Passwords.fuzz.txt | ||
| PHP.fuzz.txt | ||
| proxy-conf.fuzz.txt | ||
| Public-Source-Repo-Issues.json | ||
| pulsesecure.txt | ||
| quickhits.txt | ||
| raft-large-directories-lowercase.txt | ||
| raft-large-directories.txt | ||
| raft-large-extensions-lowercase.txt | ||
| raft-large-extensions.txt | ||
| raft-large-files-lowercase.txt | ||
| raft-large-files.txt | ||
| raft-large-words-lowercase.txt | ||
| raft-large-words.txt | ||
| raft-medium-directories-lowercase.txt | ||
| raft-medium-directories.txt | ||
| raft-medium-extensions-lowercase.txt | ||
| raft-medium-extensions.txt | ||
| raft-medium-files-lowercase.txt | ||
| raft-medium-files.txt | ||
| raft-medium-words-lowercase.txt | ||
| raft-medium-words.txt | ||
| raft-small-directories-lowercase.txt | ||
| raft-small-directories.txt | ||
| raft-small-extensions-lowercase.txt | ||
| raft-small-extensions.txt | ||
| raft-small-files-lowercase.txt | ||
| raft-small-files.txt | ||
| raft-small-words-lowercase.txt | ||
| raft-small-words.txt | ||
| Randomfiles.fuzz.txt | ||
| README.md | ||
| reverse-proxy-inconsistencies.txt | ||
| ror.txt | ||
| Roundcube-123.txt | ||
| rssfeed-files.txt | ||
| sap-analytics-cloud.txt | ||
| sap.txt | ||
| sharepoint-ennumeration.txt | ||
| spring-boot.txt | ||
| swagger.txt | ||
| tests.txt | ||
| tftp.fuzz.txt | ||
| tomcat.txt | ||
| UnixDotfiles.fuzz.txt | ||
| uri-from-top-55-most-popular-apps.txt | ||
| url-params_from-top-55-most-popular-apps.txt | ||
| versioning_metafiles.txt | ||
| Vignette.fuzz.txt | ||
| vulnerability-scan_j2ee-websites_WEB-INF.txt | ||
| web-all-content-types.txt | ||
| web-extensions-big.txt | ||
| web-extensions.txt | ||
| web-mutations.txt | ||
| Web-Server-Glassfish-Sun-Microsystems.txt | ||
| Web-Server-Java-Servlet-Runner-Adobe-JRun.txt | ||
| Web-Server-Oracle-Sun-iPlanet.txt | ||
| weblogic.txt | ||
| websphere.txt | ||
| wso2-enterprise-integrator.txt | ||
Web discovery wordlists
AdobeCQ-AEM.txt
Use for: Discovering sensitive filepaths of Adobe Experience Manager Creation date: Oct 1, 2017 No updates have been made to this wordlist since its creation.
AdobeXML.fuzz.txt
Use for: Discovering sensitive filepaths of Adobe ColdFusion Creation date: Aug 27, 2012 No updates have been made to this wordlist since its creation.
Apache.fuzz.txt
Use for: Discvering sensitive content in Apache web servers. Date of last update: Jan 26, 2015
ApacheTomcat.fuzz.txt
Use for: Discovering sensitive content in Apache Tomcat servers. Date of last update: Dec 14, 2017
CGI-HTTP-POST-Windows.fuzz.txt
Use for: Exploiting various vulnerabilities in the now defunct WYSIWYG HTML editor and website administration tool, Microsoft FrontPage Source: https://github.com/deepak0401/Front-Page-Exploit Date of last update: Aug 27, 2012 The last version of FrontPage was released on 2003.
CGI-HTTP-POST.fuzz.txt
Use for: Exploiting/Discovering various vulnerabilities in extremely old systems (Circa 1998) that use "CGI". Date of last update: Aug 27, 2012
This wordlist tests for the following vulnerabilities:
- Default password in the Nortel Meridian private branch exchange telephone switching system. Source: Nikto.
- XSS in the "Bajie HTTP JServer" (software site completely defunct, no archives exist). Source: Nikto
- CGI Vulnerability in an unknown system (payload
lastlines.cgi?process) which would allow attackers to "read arbitrary files and/or execute commands". Source: Nikto - Remote File Include in myPHPNuke. Source: Nessus
- DoS in the "D-Link Ethernet/Fast Ethernet Print Server DP-300+". Source: Sullo's Security Advisory Archive.
CGI-Microsoft.fuzz.txt
Use for: Exploiting/Discovering various vulnerabilities in miscelaneous CGI scripts that run on Microsoft operating systems. Date of last update: Aug 27, 2012
raft-* wordlists
Use for: Directory and file brute-forcing leading to identification of vulnerabilities in web applications. Source: Google's RAFT
combined_words.txt
Use for: discovering files
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
This list is a combination of the following wordlists:
- big.txt
- common.txt
- raft-large-words-lowercase.txt
- raft-large-words.txt
- raft-medium-words-lowercase.txt
- raft-medium-words.txt
- raft-small-words-lowercase.txt
- raft-small-words.txt
combined_directories.txt
Use for: discovering files and directories
This list is automatically updated by a github action whenever any of the lists it's composed by is modified.
This list is a combination of the following wordlists:
- apache.txt
- combined_words.txt
- directory-list-1.0.txt
- directory-list-2.3-big.txt
- directory-list-2.3-medium.txt
- directory-list-2.3-small.txt
- raft-large-directories-lowercase.txt
- raft-large-directories.txt
- raft-medium-directories-lowercase.txt
- raft-medium-directories.txt
- raft-small-directories-lowercase.txt
- raft-small-directories.txt
- common_directories.txt
Usage
Use for: discovering files and directories
Source
This list is automatically updated by a GitHub action whenever any of the lists it's composed by is modified.
dsstorewordlist.txt
SOURCE: https://github.com/aels/subdirectories-discover
Perfect wordlist to discover directories and files on target site with tools like ffuf.
- It was collected by parsing Alexa top-million sites for .DS_Store files (https://en.wikipedia.org/wiki/.DS_Store), extracting all the found files, and then extracting found file and directory names from around 300k real websites.
- Then sorted by probability and removed strings with one occurrence.
- resulted file you can download is below. Happy Hunting!
vulnerability-scan_j2ee-websites_WEB-INF.txt
Use for: discovering sensitive j2ee files exploiting a lfi
References:
- https://gist.github.com/harisec/519dc6b45c6b594908c37d9ac19edbc3
- https://github.com/projectdiscovery/nuclei-templates/blob/master/vulnerabilities/generic/generic-j2ee-lfi.yaml
- https://github.com/ilmila/J2EEScan/blob/master/src/main/java/burp/j2ee/issues/impl/LFIModule.java
Microsoft-Frontpage.txt
Use for: Fuzzing for common filepaths in webpages designed with Microsoft Frontpage
Year of the first release of Microsoft Frontpage: 1997
Date of last update: Oct 14, 2010
Web-Server-Java-Servlet-Runner-Adobe-JRun
Use for: Fuzzing for common filepaths in webpages served with Java Servlet Runner (Adobe JRun)
Year of the first release of Java Servlet Runner (Adobe JRun): 1997 Year of the last release of Java Servlet Runner (Adobe JRun): 2007
Date of last update: Oct 14, 2010
Web-Server-Oracle-Sun-iPlanet.txt
Use for: Fuzzing for common filepaths in webpages served with Oracle Sun iPlanet
Year of the first release of Sun-iPlanet (Adobe JRun): 1994 Year of the last release of Sun-iPlanet (Adobe JRun): 2017
Date of last update: Oct 14, 2010
Web-Server-Glassfish-Sun-Microsystems.txt
Use for: Fuzzing for common filepaths in webpages served with Glassfish - Sun Microsystems
Year of the first release of Glassfish: 2005 Glassfish is still in recieving updates as of 2024.
Date of last update: Oct 14, 2010
Oracle-EBS-wordlist.txt
Use for: Fuzzing for common filepaths of Oracle E-Business Suite (EBS) version 11.
EBS v11 exposes:
- usernames
- ports
- OS information
- protocol information
- Unauthenticated file upload
- Cookie contents
- SHA-1 hashed passwords
As an Unauthenticated user it's also possible to:
- Create forms
- Get servlets status
- Get certain configuration files
Reference: https://the-infosec.com/2017/03/29/do-you-know-what-your-erp-is-telling-us/
Date of last update: Oct 7, 2019
iis-systemweb.txt
Use for: Fuzzing the /aspnet_client/system_web/ directory on Microsoft IIS servers to detect CGIs and scripts even even if the two ladder directories are inaccessible.
Reference: https://github.com/irsdl/IIS-ShortName-Scanner Discussion: https://github.com/danielmiessler/SecLists/pull/783
Date of last update: Jun 27, 2022