Wordlists

Misc

ANDROID all permissions* (324 words) ANTIVIRUS names* (570 words) CSS all properties* (179 words) EMAIL free providers* (3'619 words) EMAIL top 100 providers* (100 words) HTML all elements* (142 words) JS event handlers* (134 words) Top Level Domains TLDs* (1'481 words) * USER-AGENTS (4'213 words)

Patterns

REGEX API Key* (42 words) REGEX web errors* (28 words)

Dictionaries

BRAZILIAN a-z - no special chars* (204'448 words) BRAZILIAN only with special chars* (71'054 words) COUNTRY with cc* (254 words) DANISH a-z - no special chars* (232'249 words) DANISH only with special chars* (1'975 words) DUTCH a-z - no special chars* (328'986 words) ENGLISH a-z - no special chars* (241'561 words) ENGLISH top10k from google* (10'000 words) FRENCH a-z - no special chars* (85'915 words) FRENCH only with special chars* (2'115 words) GERMAN a-z - no special chars* (278'427 words) IRISH a-z - no special chars* (5'224 words) IRISH only with special chars* (11'146 words) ITALIAN a-z - no special chars* (102'469 words) * JAPANESE ROMANJI - no special chars (22'336 words) PORTUGUESE a-z - no special chars* (305'039 words) PORTUGUESE only with special chars* (114'360 words) SPANISH a-z - no special chars* (68'673 words) SWEDISH a-z - no special chars* (79'763 words) SWEDISH only with special chars* (41'663 words)

Payloads

SQLI blind time-based* (283 words)

Discovery

ASP files only* (20'481 words) ASP files with path* (3'992 words) BACKUP files only* (1'015 words) BACKUP files with path* (1'286 words) DIRECTORY only one* (1'993 words) DLL files* (208 words) Dot files* (2'199 paths) FUNCTIONS mix* (1'555 words) JSP files only* (2'158 words) JSP files with path* (167 words) LOG files only* (142 words) PARAMETERS actions* (28 words) PARAMETERS after* (9 words) PARAMETERS before* (8 words) PARAMETERS mix* (20'376 words) PHP files only* (43'795 words) PHP files with path* (13'691 words) TOP-10K-WEB-DIRECTORIES from 10M urlteam links* (10'000 words) USER field names* (228 words) TOP Robots.txt Disallow Paths from 140GB CommonCrawl data* (15'778 paths) URLhaus URL Paths sorted by frequency* (15'702 paths)

Large Password Lists (Torrent)

* [CrackStation's Password Cracking Dictionary [ONLY "real human" passwords] - 247MB compressed](https://crackstation.net/downloads/crackstation-human-only.txt.gz.torrent) * [CrackStation's Password Cracking Dictionary [FULL] - 4.2GB compressed](https://crackstation.net/downloads/crackstation.txt.gz.torrent)

Large Password Lists (HTTP Direct Download)

* 10-million-combos.zip - 85MB compressed * crackstation-human-only.txt.gz - 246MB compressed * b0n3z_dictionary-SPLIT-BY-LENGTH-34.6GB.7z - 3GB compressed * crackstation.txt.gz - 4GB compressed * WPA-PSK WORDLIST 3 Final (13 GB).rar - 4GB compressed * 36.4GB-18in_1.lst.7z - 5GB compressed * b0n3z-wordlist-sorted_REPACK-69.3GB.7z - 9GB compressed ## Others Repositories

* FUZZING - SecLists * FUZZING - FuzzDB * DOMAIN - Easylist * DOMAIN - Fanboy/Adblock * DICTIONNARY - English Words * DICTIONNARY - Probable Wordlists * DICTIONNARY - Most common English words from Google sorted by frequency

External Ressources

* DNS - Cisco Umbrella Top 1 million * DNS - Cisco Umbrella Top TLDs * DNS - Alexa Top 1 million * DOMAIN - FilterLists * PASSWORD - OpenWall * PASSWORD - CrackStation * PASSWORD - g0tmi1k's blog * PASSOWRD - Skull Security * WORDLIST - Hashcrack * WORDLIST - md5this * WORDLIST - Packet Storm * FIRST & LAST NAMES - philipperemy

Thanks to

* URLTeam * Josh Kaufman * odomojuli * lipoja for TLDs list * URLhaus