Wordlists¶
Word list and sec list it is payload data for web attacking.
Seclists¶
install: "sudo apt-get install -y seclists" location: /usr/share/seclists/
Password recovey¶
Use /usr/share/wordlists/rockyou.txt with /usr/share/seclists/Passwords
Custom wordlists¶
we can set deep, count of letters in words, output file and other options
sudo cewl -d 2 -m 5 -w ourWordlist.txt www.MegaCorpOne.com
Create binary lists¶
ls -sa /usr/bin | sed 's/[0-9]*//g' | sed -r 's/\s+//g' |sort -u > $HOME/binaries-wordlist.txt
References¶
- web200.Tools.Wordlists
- (SecLists, 2021), https://github.com/danielmiessler/SecLists
- (Kali.org, 2021), https://tools.kali.org/password-attacks/cewl