{"id":13843313,"url":"https://github.com/Zarcolio/wwwordlist","last_synced_at":"2025-07-11T18:31:37.340Z","repository":{"id":44765141,"uuid":"264414365","full_name":"Zarcolio/wwwordlist","owner":"Zarcolio","description":"Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quoted texts in the text and mail files in order to generate wordlists.","archived":false,"fork":false,"pushed_at":"2023-09-10T06:09:05.000Z","size":100,"stargazers_count":96,"open_issues_count":0,"forks_count":11,"subscribers_count":4,"default_branch":"master","last_synced_at":"2024-08-05T17:36:55.395Z","etag":null,"topics":["bruteforce","bugbounty","ctf","hacking","infosec","penetration-testing","pentest","pentesting","python3","wordlist","wordlist-generator","wordlists"],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/Zarcolio.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null}},"created_at":"2020-05-16T10:39:59.000Z","updated_at":"2024-06-17T08:12:32.000Z","dependencies_parsed_at":"2022-08-28T18:01:26.097Z","dependency_job_id":null,"html_url":"https://github.com/Zarcolio/wwwordlist","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zarcolio%2Fwwwordlist","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zarcolio%2Fwwwordlist/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zarcolio%2Fwwwordlist/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/Zarcolio%2Fwwwordlist/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/Zarcolio","download_url":"https://codeload.github.com/Zarcolio/wwwordlist/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225745566,"owners_count":17517671,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bruteforce","bugbounty","ctf","hacking","infosec","penetration-testing","pentest","pentesting","python3","wordlist","wordlist-generator","wordlists"],"created_at":"2024-08-04T17:01:59.259Z","updated_at":"2024-11-21T14:31:03.300Z","avatar_url":"https://github.com/Zarcolio.png","language":"Python","funding_links":[],"categories":["Python","Python (1887)"],"sub_categories":[],"readme":"![](https://img.shields.io/github/license/Zarcolio/wwwordlist) ![](https://badges.pufler.dev/visits/Zarcolio/wwwordlist) ![](https://img.shields.io/github/stars/Zarcolio/wwwordlist) ![](https://img.shields.io/github/forks/Zarcolio/wwwordlist) ![](https://img.shields.io/github/issues/Zarcolio/wwwordlist) ![](https://img.shields.io/github/issues-closed-raw/Zarcolio/wwwordlist) ![](https://img.shields.io/github/issues-pr/Zarcolio/wwwordlist) ![](https://img.shields.io/github/issues-pr-closed-raw/Zarcolio/wwwordlist)\n\n# About [WWWordList](https://github.com/Zarcolio/wwwordlist)\nWWWordList is a wordlist-generator, it creates a wordlist by taking input from stdin and extracts words based on HTML (extracted with BS4), URLs, JS/HTTP/input variables, quoted texts found in the supplied text and mail files.\nIt isn't a scraper or spider, so Wwwordlist is used in conjunction with a tool that facilitates the downloading of HTML, for example wget. \n\n# Why use WWWordList?\nBecause [![Twitter](https://img.shields.io/twitter/url/https/twitter.com/stokfredrik.svg?style=social\u0026label=Stök)](https://twitter.com/stokfredrik) says you should use good wordlists, based on the content of the target. This is my attempt on creating a wordlist-generator that supports this.\n\n# Install\nWWWordList should be able to run with a default Kali Linux installation with BS4 installed. To install WWWordList including BS4:\n```\ngit clone https://github.com/Zarcolio/wwwordlist\ncd wwwordlist\nsudo bash install.sh\n```\nWhen using the installer in an automated environment, use the following command for an automated installation:\n\n```\nsudo bash install.sh -auto\n```\n\n\nIf you're running into trouble running WWWordList, please drop me an issue and I'll try to fix it :)\n\n# Usage\n```\nusage: wwwordlist [-h] [-type \u003ctype\u003e] [-case \u003co|l|u\u003e] [-iwh \u003clength\u003e] [-iwn \u003clength\u003e] [-ii] \n[-idu] [-min \u003clength\u003e] [-max \u003clength\u003e]\n\nUse WWWordList to generate a wordlist from input.\n\noptional arguments:\n  -h, -help      show this help message and exit\n  -type \u003ctype\u003e   Analyze the text between HTML tags, inside urls found, inside quoted text or in\n                 the full text. Choose between httpvars|inputvars|jsvars|html|urls|quoted|full.\n                 Defaults to 'full'.\n  -case \u003co|l|u\u003e  Apply original, lower or upper case. If no case type is specified, lower case is the\n                 default. If another case is specified, lower has to be specified to be included.\n                 Spearate by comma's.\n  -excl \u003cfile\u003e   Leave out the words found in this file.\n  -iwh \u003clength\u003e  Ignore values containing a valid hexadecimal number of this length. Don't use low \n                 values as letters a-f will be filtered.\n  -iwn \u003clength\u003e  Ignore values containing a valid decimal number of this length.\n  -ii            Ignore words that are a valid integer number.\n  -idu           Ignore words containing a dash or underscore, but break them in parts.\n  -min \u003clength\u003e  Defines the minimum length of a word to add to the wordlist, defaults to 3.\n  -max \u003clength\u003e  Defines the maximum length of a word to add to the wordlist, defaults to 10\n  -mailfile      Quoted-printable decode input first. Use this option when inputting an email body.\n```\n\n# Examples\nIf you want to build a wordlist based on the text between the HTML tags, simply run the following command and let the wordlist generation begin:\n```\ncat index.html|wwwordlist -type html\n```\nIf you want to build a wordlist based on links inside a file, simply run:\n```\ncat index.html|wwwordlist -type urls\n```\nIf you want to build a wordlist based on the text between the HTML tags, but you want it to be quite small, simply run:\n```\ncat index.html|wwwordlist -type html -ih 4 -dui -max 8\n```\nIf you want to build a wordlist based on the text between the HTML tags, but you want it to be really big, simply run:\n```\ncat index.html|wwwordlist -type html -ih 4 -case o,l,u\n```\nIf you want to build a wordlist based on the text from a webpage, simply run:\n```\nwget -qO - example.com|wwwordlist -type html\n```\nIf you want to build a big wordlist based on whole website and run it through ffuf, try:\n```\nwget -nd -r example.com -q -E  -R woff,jpg,gif,eot,ttf,svg,png,otf,pdf,exe,zip,rar,tgz,docx,ico,jpeg\ncat *.*|wwwordlist -ih 4 -case o,l,u -max 10 -full|ffuf -recursion -w - -u https://example.com/FUZZ -r\n```\nWant to throw [waybackurls](https://github.com/tomnomnom/waybackurls) in the mix? Use it together with xargs together and [urlcoding](https://github.com/Zarcolio/urlcoding) (warning: this will take a lot of time):\n```\ncat domains.txt | waybackurls | urlcoding -e | parallel -pipe xargs -n1 wget -T 2 -qO - | wwwordlist -ih 4\n```\nGot a Git repo cloned locally? Try the following command inside the clone folder:\n```\nfind . -type f -exec strings  {} +|wwwordlist\n```\n\n# Contribute?\nDo you have some usefull additions to WWWordList:\n\n* [![PR's Welcome](https://img.shields.io/badge/PRs-welcome-brightgreen.svg?style=flat)](https://github.com/Zarcolio/wwwordlist/pulls) \n* [![Twitter](https://img.shields.io/twitter/url/https/twitter.com/zarcolio.svg?style=social\u0026label=Contact%20me)](https://twitter.com/zarcolio)\n\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FZarcolio%2Fwwwordlist","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FZarcolio%2Fwwwordlist","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FZarcolio%2Fwwwordlist/lists"}