Wordlists for Directory Path or Server Brute Forcing

Of course, password cracking isn’t the only use for wordlists. Many security tools use wordlists for web or directory path enumeration. These tools aren’t cracking passwords, but use wordlists to automatically search for directories or files on servers. These lists contain things like common control panel & configuration file names and webserver data paths. 

➢      https://github.com/danielmiessler/SecLists

➢      https://gist.github.com/jhaddix

➢      https://wordlists.assetnote.io/

When you download wordlists, there are usually a lot of words that are duplicates or the wordlist can contain a lot of useless information. The following is a tool to clean up wordlists from useless or random junk:

➢      https://github.com/BonJarber/SecUtils - Clean Wordlist (I do disagree with classifying some symbols as “Noise...