A lists of words based on common web directory and file names lists of words based on common web directory and file names. These wordlists are for Web security testing purpose.
☆246May 16, 2019Updated 7 years ago
Alternatives and similar repositories for WordLists-20111129
Users that are interested in WordLists-20111129 are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Subdomain Enumeration Wordlist. 8956437 unique words. Updated.☆77May 23, 2020Updated 6 years ago
- Ghazi is a BurpSuite Plugins For Testing various PayLoads Like "XSS,SQLi,SSTI,SSRF,RCE and LFI" through Different tabs , Where Each Tab W…☆105Feb 11, 2019Updated 7 years ago
- ☆11May 15, 2020Updated 6 years ago
- jsonp is a Burp Extension which attempts to reveal JSONP functionality behind JSON endpoints.☆153Feb 15, 2021Updated 5 years ago
- This repo contains Axis web shells☆18Jun 15, 2019Updated 7 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- A Burp Suite content discovery plugin that add the smart into the Buster!☆32Jan 22, 2018Updated 8 years ago
- Fuzzing Payloads to Assist in Web Application Testing.☆163Jun 6, 2019Updated 7 years ago
- Auto Recon Bash Script☆31Dec 31, 2024Updated last year
- This changes the style of Burp Suite's Repeater tabs to help the testers☆29Jul 3, 2019Updated 7 years ago
- ☆31Apr 6, 2021Updated 5 years ago
- Web App bug hunting☆576Nov 26, 2025Updated 11 months ago
- OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website.☆225Feb 24, 2019Updated 7 years ago
- Powerful Visual Subdomain Enumeration at the Click of a Mouse☆137Jun 6, 2019Updated 7 years ago
- LANGZI_SRC_安全巡航 是一款集成漏扫，验证，资产监控，自动复现并且生成结果表报的工具，实现初衷是为了帮助白帽子在SRC中节约时间成本的自动化工具。☆14Jul 7, 2019Updated 7 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- HTTP file upload scanner for Burp Proxy☆491Dec 25, 2023Updated 2 years ago
- Tool is to check for Cache Deception Attack Both For Authenticated and UnAuthenticated Pages☆43Nov 23, 2021Updated 4 years ago
- Wordlists that have been compiled using Commonspeak2. This repo is updated every time new wordlists are generated.☆542Aug 23, 2018Updated 8 years ago
- This exention enables autocompletion within BurpSuite Repeater/Intruder tabs.☆166Mar 5, 2021Updated 5 years ago
- stuff i'm willing to share with the world lol☆168Oct 17, 2022Updated 4 years ago
- SSRF (Server Side Request Forgery) testing resources☆2,511Oct 12, 2024Updated 2 years ago
- Wordlists, Dictionaries and Other Data Sets for Writing Software Security Test Cases☆370Aug 14, 2024Updated 2 years ago
- A wordlist of API names for web application assessments☆944Jun 17, 2025Updated last year
- Pentest/BugBounty progress control with scanning modules☆279Jul 16, 2020Updated 6 years ago
- GPU virtual machines on DigitalOcean Gradient AI • AdGet to production fast with high-performance AMD and NVIDIA GPUs you can spin up in seconds. The definition of operational simplicity.
- A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques☆744May 4, 2019Updated 7 years ago
- CVE-2019-2725 命令回显☆432May 8, 2023Updated 3 years ago
- Collection of content discovery wordlists in one wordlist.☆37Jan 18, 2022Updated 4 years ago
- This Repo contains wordlist for subdomain enumeration , php file path, html file path, and js file path☆109Aug 4, 2020Updated 6 years ago
- ☆162Dec 7, 2017Updated 8 years ago
- List of XSS Vectors/Payloads☆1,391Jan 14, 2026Updated 9 months ago
- Extract (links/possible endpoints) from responses & filter them via decoding/sorting☆93Aug 27, 2019Updated 7 years ago
- Burp Suite extension to discover assets from HTTP response.☆235Jan 22, 2025Updated last year
- Generates lists of live hosts and URLs for targeting, automating the usage of MassDNS, Masscan and nmap to filter out unreachable hosts a…☆366Jul 23, 2022Updated 4 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Easy Fast recon script☆30Sep 15, 2019Updated 7 years ago
- Automated blind-xss search for Burp Suite☆282Oct 10, 2019Updated 7 years ago
- Common Web Managers Fuzz Wordlists☆178Aug 11, 2026Updated 2 months ago
- CollabOzark is a simple tool which helps the researchers track SSRF, RCE, Blind XSS, XXE, External Resource Access payloads triggers.☆135Sep 25, 2019Updated 7 years ago
- Potentially dangerous files☆3,405Jul 28, 2026Updated 3 months ago
- Deeplack is a python script designed for comparing images (screenshots) using DeepAI to detect changes on websites.☆14Jun 19, 2019Updated 7 years ago
- BurpSuite's payload-generation extension aiming at applying fuzzed test-cases depending on the type of payload (integer, string, path; JS…☆41Mar 15, 2021Updated 5 years ago