Bug-Bounty-Wordlists

(★ 1,429)

A repository that includes all the important wordlists used while bug hunting.

  • 403_header_payloads.txt
  • 403_url_payloads.txt
  • 6-digits-000000-999999.txt
  • admin.txt
  • adminer.txt
  • all-files-leaked.txt
  • all-gitdorks.txt
  • all_fuzz.txt
  • allgoogle.txt
  • android_all_permissions.txt
  • antivirus_names.txt
  • api-actions.txt
  • api-objects.txt
  • api.txt
  • api_seen_in_wild.txt
  • asp_files_only.txt
  • asp_files_with_path.txt
  • backup_files_only.txt
  • backup_files_with_path.txt
  • cgi-bin.txt
  • cgi-files.txt
  • config.txt
  • css_all_properties.txt
  • cve-paths.txt
  • directory_only_one.small.txt
  • dll_files.txt
  • dotfiles.txt
  • ec2.txt
  • env.txt
  • extensions.txt
  • fuzz.txt
  • git_config.txt
  • google.txt
  • htaccess
  • jsp_files_only.txt
  • juicy-paths.txt
  • jwt-secrets.txt
  • k8s.txt
  • keys.txt
  • leaky-misconfigs.txt
  • LICENSE
  • log.txt
  • log4j_payloads.txt
  • ngnix.txt
  • npmrc.txt
  • open-redirects.txt
  • perl-files.txt
  • php_files_only.txt
  • php_files_with_path.txt
  • phpmyadmin.txt
  • phpunit.txt
  • properties-files.txt
  • README.md
  • shodan-dorks.txt
  • sql.txt
  • sqli-google-dorks.txt
  • sqli_blind_time-based.txt
  • tomcat.txt
  • top-10k-web-directories_from_10M_urlteam_links.txt
  • user_field_names.txt
  • webconfig.txt
  • windows-lfi.txt
  • wordpress-random.txt
  • wp-content.txt
  • wp-plugins.txt
  • xss_payload.txt
  • yaml.txt
// repository documentation