custom fuzzing wordlist fuzzing_list.txt
cat urls.txt | sed 's|\(.*\)/[^/]*$|\1|' | cut -d"https://github.com/" -f4,5,6,7,8,9,10,11 | tr "https://github.com/" "\n" | sed '/^$/d' | anew fuzzing_list.txt
custom dns wordlist dns-wordlist.txt
cat alltargets.txt | sed 's/\.[^.]*$//' | tr "." "\n" | egrep -v '^[0-9]*$' | anew dns-wordlist.txt
scan these urls for nuclei misconfiguration urls-for-nuclei.txt
cat urls.txt | grep -E "^https?://[^/]+/.+" | cut -d"https://github.com/" -f1-4 | anew -q urls-for-nuclei.txt ;cat urls.txt | grep -E "^https?://[^/]+/.+" | cut -d"https://github.com/" -f1-5 | anew -q urls-for-nuclei.txt ;cat urls.txt | grep -E "^https?://[^/]+/.+" | cut -d"https://github.com/" -f1-6 | anew -q urls-for-nuclei.txt
default-username-password.txt
curl -s "https://raw.githubusercontent.com/rix4uni/WordList/main/default-username-password.txt"|cut -d":" -f1 | tee -a username.txt && curl -s "https://raw.githubusercontent.com/rix4uni/WordList/main/default-username-password.txt"|cut -d":" -f2 | tee -a password.txt
custom parameters wordlist params.txt
cat urls.txt | grep "\.php?" | uro | grep "?" | cut -f2 -d"?" | cut -f1 -d"=" | sed '/^\s*$/d'| anew params.txt
custom fuzzing wordlist onelistforall.txt
curl -s "https://raw.githubusercontent.com/maurosoria/dirsearch/master/db/dicc.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/six2dez/OneListForAll/main/onelistforallmicro.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/six2dez/OneListForAll/main/onelistforallshort.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/ayoubfathi/leaky-paths/main/leaky-paths.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/Bo0oM/fuzz.txt/master/fuzz.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/abdallaabdalrhman/Wordlist-for-Bug-Bounty/main/great_wordlist_for_bug_bounty.txt" | anew -q onelistforall.txt && curl -s "https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/raft-large-directories.txt" | anew -q onelistforall.txt && curl -s "https://wordlists-cdn.assetnote.io/data/automated/httparchive_php_2020_11_18.txt" | anew -q onelistforall.txt && curl -s "https://wordlists-cdn.assetnote.io/data/automated/httparchive_aspx_asp_cfm_svc_ashx_asmx_2020_11_18.txt" | anew -q onelistforall.txt && curl -s "https://wordlists-cdn.assetnote.io/data/automated/httparchive_jsp_jspa_do_action_2022_08_28.txt" | anew -q onelistforall.txt
- upto top 50 =>
*-small.txt - upto top 500 =>
*-medium.txt - all payloads with no limit =>
*-large.txt, if more then 50mb then*-large-1.txt,*-large-2.txt
- all technologies with no limit =>
techname/techname.txt, if more then 50mb thentechname/techname-1.txt,techname/techname-2.txt
Using: nuclei-wordlist-generator.go
techname/techname-unknown.txttechname/techname-info.txttechname/techname-low.txttechname/techname-medium.txttechname/techname-high.txttechname/techname-critical.txttechname/techname-all.txt
Leave a Reply