Wordlist_Generator – Unique Wordlist Generator Of Unique Wordlists
wordlist_generator generates wordlists with unique words and phrases with procedures talked about in tomnomnom’s report “Who, What, The place, When”. It normally takes URLs from gau and splits them to get text in URLs. Then it requests each and every URL to fetch all phrases. Last but not least, wordlist_generator removes from wordlist almost everything from “denylists” directory documents to keep only unique words and phrases, which you can use for domain, directory, parameter, vhosts, and so on bruteforcing.
Use:
Examples:
$ ./wordlist_generator.py -d hackerone.com -a 5000 -t 50
$ ./wordlist_generator.py -d bugcrowd.com -a 1000
$ ./wordlist_generator.py -d intigriti.com > intigriti_wordlist.txt
To display screen the assistance for the instrument use the -h flag:
./wordlist_generator.py -h
Flag | Description | Instance |
---|---|---|
-area |
focus on domain | ./wordlist_generator.py -d openbugbounty.org |
-threads |
threads amount of money | ./wordlist_generator.py -d yahoo.com -t 6 |
-amount |
quantity of URLs to fetch from gau | /wordlist_generator.py -d twitter.com -a 10000 |
Installation:
$ git clone https://github.com/SomeKirill/wordlist_generator/
$ cd wordlist_generator
$ pip set up requests
denylists wordlists utilized:
- https://github.com/danielmiessler/SecLists/blob/grasp/Discovery/Website-Material/raft-massive-directories-lowercase.txt
- https://github.com/oprogramador/most-frequent-phrases-by-language/blob/grasp/src/assets/dutch.txt
- https://github.com/1st20hours/google-10000-english/blob/grasp/google-10000-english.txt
- https://tools.ietf.org/html/rfc1866