Wordlists

Misc

• ANDROID all permissions (324 words)
• ANTIVIRUS names (570 words)
• CSS all properties (179 words)
• EMAIL free providers (3'619 words)
• EMAIL top 100 providers (100 words)
• HTML all elements (134 words)
• JS event handlers (109 words)
• Top Level Domains TLDs (1'481 words)
• USER-AGENTS.TXT ** (4'213 words)

Patterns

• REGEX API Key (42 words)
• REGEX web errors (28 words)

Dictionaries

• BRAZILIAN a-z - no special chars (204'448 words)
• BRAZILIAN only with special chars (71'054 words)
• COUNTRY with cc (254 words)
• DANISH a-z - no special chars (232'249 words)
• DANISH only with special chars (1'975 words)
• DUTCH a-z - no special chars (328'986 words)
• ENGLISH a-z - no special chars (241'561 words)
• ENGLISH top10k from google (10'000 words)
• FRENCH a-z - no special chars (85'915 words)
• FRENCH only with special chars (2'115 words)
• GERMAN a-z - no special chars (278'427 words)
• IRISH a-z - no special chars (5'224 words)
• IRISH only with special chars (11'146 words)
• ITALIAN a-z - no special chars (102'469 words)
• PORTUGUESE a-z - no special chars (305'039 words)
• PORTUGUESE only with special chars (114'360 words)
• SPANISH a-z - no special chars (68'673 words)
• SWEDISH a-z - no special chars (79'763 words)
• SWEDISH only with special chars (41'663 words)

Payloads

• SQLI blind time-based (283 words)

Discovery

• ASP files only (20'481 words)
• ASP files with path (3'992 words)
• BACKUP files only (1'015 words)
• BACKUP files with path (1'286 words)
• DIRECTORY only one (1'993 words)
• DLL files (208 words)
• FUNCTIONS mix (1'555 words)
• JSP files only (2'158 words)
• JSP files with path (167 words)
• LOG files only (142 words)
• PARAMETERS actions (28 words)
• PARAMETERS after (9 words)
• PARAMETERS before (8 words)
• PARAMETERS mix (20'376 words)
• PHP files only (43'795 words)
• PHP files with path (13'691 words)
• TOP-10K-WEB-DIRECTORIES from 10M urlteam links (10'000 words)
• USER field names (228 words)
• TOP Robots.txt Disallow Paths from 140GB CommonCrawl data (15'778 paths)
• URLhaus URL Paths sorted by frequency (15'702 paths)

Large Password Lists (Torrent)

• CrackStation's Password Cracking Dictionary [ONLY "real human" passwords] - 247MB compressed
• CrackStation's Password Cracking Dictionary [FULL] - 4.2GB compressed

Large Password Lists (HTTP Direct Download)

• 10-million-combos.zip - 85MB compressed
• crackstation-human-only.txt.gz - 246MB compressed
• b0n3z_dictionary-SPLIT-BY-LENGTH-34.6GB.7z - 3GB compressed
• crackstation.txt.gz - 4GB compressed
• WPA-PSK WORDLIST 3 Final (13 GB).rar - 4GB compressed
• 36.4GB-18_in_1.lst.7z - 5GB compressed
• b0n3z-wordlist-sorted_REPACK-69.3GB.7z - 9GB compressed

Others Repositories

• FUZZING - SecLists
• FUZZING - FuzzDB
• DOMAIN - Easylist
• DOMAIN - Fanboy/Adblock
• DICTIONNARY - English Words
• DICTIONNARY - Probable Wordlists
• DICTIONNARY - Most common English words from Google sorted by frequency

External Ressources

• DNS - Cisco Umbrella Top 1 million
• DNS - Cisco Umbrella Top TLDs
• DNS - Alexa Top 1 million
• DOMAIN - FilterLists
• PASSWORD - OpenWall
• PASSWORD - CrackStation
• PASSWORD - g0tmi1k's blog
• PASSOWRD - Skull Security
• WORDLIST - Hashcrack
• WORDLIST - md5this
• WORDLIST - Packet Storm
• FIRST & LAST NAMES - philipperemy

Thanks to

• URLTeam
• Josh Kaufman
• odomojuli
• lipoja for TLDs list
• URLhaus