Wordlist-Generator generates wordlists with unique words with techniques mentioned in tomnomnom’s report “Who, What, Where, When”. It takes URLs from gau and splits them to get words in URLs.
Then it requests each URL to fetch all words. Finally, wordlist_generator removes from wordlist everything from “denylists” directory files to keep only unique words, which you can use for domain, directory, parameter, vhosts, etc bruteforcing.
Usage
$ ./wordlist_generator.py -d hackerone.com -a 5000 -t 50
$ ./wordlist_generator.py -d bugcrowd.com -a 1000
$ ./wordlist_generator.py -d intigriti.com > intigriti_wordlist.txt
To display the help for the tool use the -h flag:
./wordlist_generator.py -h
Flag | Description | Example |
---|---|---|
-domain | target domain | ./wordlist_generator.py -d openbugbounty.org |
-threads | threads amount | ./wordlist_generator.py -d yahoo.com -t 6 |
-amount | amount of URLs to fetch from gau | /wordlist_generator.py -d twitter.com -a 10000 |
Installation
$ git clone https://github.com/SomeKirill/wordlist_generator/
$ cd wordlist_generator
$ pip install requests
Denylists Wordlists Used
What is Networking? Networking brings together devices like computers, servers, routers, and switches so they…
Introduction In the world of Open Source Intelligence (OSINT), anonymity and operational security (OPSEC) are…
Introduction As cyber threats grow more sophisticated, organizations need more than just firewalls and antivirus…
Introduction When it comes to cybersecurity and ethical hacking, one of the most effective ways…
Introduction In the world of cybersecurity, knowledge is power. One of the most powerful skillsets…
Introduction In the vast ocean of the internet, the most powerful tool you already have…