search

Lists for Fuzzing

Below we will show different list we can be useful when fuzzing an web application.

hashtag
Common

/usr/share/wordlists/seclists/Discovery/Web-Content/common.txt

We have the same list with other languages.

hashtag
Directory Lists 2.3

/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-big.txt 
/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-medium.txt 
/usr/share/wordlists/seclists/Discovery/Web-Content/directory-list-2.3-small.txt

We have the same lists but in lowercase.

hashtag
Raft List

/usr/share/wordlists/seclists/Discovery/Web-Content/raft-medium-directories.txt
/usr/share/wordlists/seclists/Discovery/Web-Content/raft-medium-extensions.txt
/usr/share/wordlists/seclists/Discovery/raft-medium-files.txt
/usr/share/wordlists/seclists/Discovery/raft-medium-words.txt

We have the same lists in different sizes.

hashtag
APIs

hashtag
Subdomains

hashtag
Usernames

PreviousToolsNextCommon Web Application Attacks

Last updated