trickest / wordlists
Real-world infosec wordlists, updated regularly
☆1,394Updated this week
Related projects ⓘ
Alternatives and complementary repositories for wordlists
- Find way more from the Wayback Machine, Common Crawl, Alien Vault OTX, URLScan & VirusTotal!☆1,725Updated 4 months ago
- A repository that includes all the important wordlists used while bug hunting.☆1,196Updated last year
- A python tool used to discover endpoints, potential parameters, and a target specific wordlist for a given target☆1,202Updated 3 months ago
- 403/401 Bypass Methods + Bash Automation + Your Support ;)☆1,268Updated 2 years ago
- Rockyou for web fuzzing☆2,608Updated 2 months ago
- ⡷⠂𝚔𝚊𝚛𝚖𝚊 𝚟𝟸⠐⢾ is a Passive Open Source Intelligence (OSINT) Automated Reconnaissance (framework)☆811Updated 4 months ago
- A wordlist framework to fullfill your kinks with your wordlists. For security researchers, bug bounty and hackers.☆1,034Updated 6 months ago
- An XSS exploitation command-line interface and payload generator.☆1,260Updated 3 months ago
- Automated & Manual Wordlists provided by Assetnote☆1,311Updated 3 months ago
- Tool to bypass 403/40X response codes.☆1,107Updated 3 months ago
- Burp Extension to find potential endpoints, parameters, and generate a custom target wordlist☆1,246Updated 3 months ago
- Dome - Subdomain Enumeration Tool. Fast and reliable python script that makes active and/or passive scan to obtain subdomains and search …☆513Updated 9 months ago
- NucleiFuzzer is a Powerful Automation tool for detecting XSS, SQLi, SSRF, Open-Redirect, etc.. Vulnerabilities in Web Applications☆1,302Updated last month
- declutters url lists for crawling/pentesting☆1,178Updated last week
- ☆657Updated last month
- An IIS short filename enumeration tool☆787Updated 3 months ago
- A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..e…☆934Updated 4 months ago
- Payload Arsenal for Pentration Tester and Bug Bounty Hunters☆891Updated last year
- Extract URLs, paths, secrets, and other interesting bits from JavaScript☆1,412Updated 5 months ago
- A simple tool for bypassing file upload restrictions.☆782Updated 3 months ago
- A Bash script and Docker image for Bug Bounty reconnaissance. Intended for headless use.☆873Updated 10 months ago
- bypass-url-parser☆1,018Updated last week
- A simple script just made for self use for bypassing 403☆1,687Updated 5 months ago
- 1337 Wordlists for Bug Bounty Hunting☆789Updated last week
- MagicRecon is a powerful shell script to maximize the recon and data collection process of an objective and finding common vulnerabilitie…☆859Updated 3 months ago
- Tool for discovering the origin host behind a reverse proxy. Useful for bypassing cloud WAFs!☆845Updated 9 months ago
- Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned ent…☆1,707Updated 2 months ago
- Awesome Bug bounty builder Project☆641Updated last year
- Making Favicon.ico based Recon Great again !☆1,123Updated last year