wordlist

References

1. Common paths wordlistdual-use

   ~4,700 common web paths and filenames for content discovery. Hosted here for authorized testing.

   Open ↗
2. RAFT medium directories wordlistdual-use

   ~30,000 directory names (RAFT medium) for content discovery. Hosted here for authorized testing.

   Open ↗
3. API endpoints wordlistdual-use

   Common REST API route segments for endpoint discovery. Hosted here for authorized testing.

   Open ↗
4. HTTP parameters wordlistdual-use

   ~6,400 common HTTP parameter names for parameter discovery. Hosted here for authorized testing.

   Open ↗
5. GraphQL fields wordlistdual-use

   Common GraphQL field names for schema exploration. Hosted here for authorized testing.

   Open ↗
6. GraphQL arguments wordlistdual-use

   Common GraphQL argument names for schema exploration. Hosted here for authorized testing.

   Open ↗
7. Sensitive files wordlistdual-use

   Exposed-file name checks (.git, .env, backups, configs). Hosted here for authorized testing.

   Open ↗
8. Prototype-pollution parameters wordlistdual-use

   Parameter names used to probe for prototype pollution. Hosted here for authorized testing.

   Open ↗
9. Assetnote Wordlistsdual-use

   Automated and manually-curated wordlists for content and subdomain discovery, regenerated monthly (via Commonspeak2 and GitHub Actions) targeting popular internet technologies. Apache-2.0 licensed, served via CDN with a browsable DataTables interface and bulk wget download.

   Open ↗