{"id":13576655,"url":"https://github.com/trickest/wordlists","last_synced_at":"2026-01-31T06:03:52.736Z","repository":{"id":56750757,"uuid":"523315728","full_name":"trickest/wordlists","owner":"trickest","description":"Real-world infosec wordlists, updated regularly","archived":false,"fork":false,"pushed_at":"2026-01-27T12:49:25.000Z","size":2254638,"stargazers_count":1621,"open_issues_count":2,"forks_count":199,"subscribers_count":32,"default_branch":"main","last_synced_at":"2026-01-28T00:32:16.669Z","etag":null,"topics":["bugbounty","content-discovery","directory-bruteforce","hacking","infosec","penetration-testing","pentesting","reconnaissance","security","wordlist","wordlist-generator","wordlists","wordlists-dictionary-collection"],"latest_commit_sha":null,"homepage":"https://trickest.com","language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/trickest.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null,"notice":null,"maintainers":null,"copyright":null,"agents":null,"dco":null,"cla":null}},"created_at":"2022-08-10T11:26:18.000Z","updated_at":"2026-01-27T14:28:48.000Z","dependencies_parsed_at":"2023-02-19T07:01:26.392Z","dependency_job_id":"dee204dd-c863-4e75-8348-be5aed938f3f","html_url":"https://github.com/trickest/wordlists","commit_stats":{"total_commits":1587,"total_committers":3,"mean_commits":529.0,"dds":0.007561436672967825,"last_synced_commit":"a23cf7df9bb00073049ec9acf9badbacc6bc5d53"},"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/trickest/wordlists","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trickest%2Fwordlists","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trickest%2Fwordlists/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trickest%2Fwordlists/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trickest%2Fwordlists/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/trickest","download_url":"https://codeload.github.com/trickest/wordlists/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/trickest%2Fwordlists/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":28931085,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-01-31T04:05:25.756Z","status":"ssl_error","status_checked_at":"2026-01-31T04:02:35.005Z","response_time":128,"last_error":"SSL_read: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bugbounty","content-discovery","directory-bruteforce","hacking","infosec","penetration-testing","pentesting","reconnaissance","security","wordlist","wordlist-generator","wordlists","wordlists-dictionary-collection"],"created_at":"2024-08-01T15:01:12.499Z","updated_at":"2026-01-31T06:03:52.705Z","avatar_url":"https://github.com/trickest.png","language":null,"readme":"\u003ch1 align=\"center\"\u003eWordlists \u003ca href=\"https://twitter.com/intent/tweet?text=Wordlists%20-%20Real-world%20infosec%20wordlists%2C%20updated%20regularly%20by%20%40trick3st%0A%0Ahttps%3A%2F%2Fgithub.com%2Ftrickest%2Fwordlists\u0026hashtags=bugbounty,bugbountytips,infosec\"\u003e\u003cimg src=\"https://img.shields.io/badge/Tweet--lightgrey?logo=twitter\u0026style=social\" alt=\"Tweet\" height=\"20\"/\u003e\u003c/a\u003e\u003c/h1\u003e\n\u003ch3 align=\"center\"\u003eReal-world infosec wordlists, updated regularly\u003c/h3\u003e\n\n![Trickest Wordlists](images/cover.png \"Trickest Wordlists\")\n## Current Wordlists\n### Technologies\nThese wordlists are based on the source code of the CMSes/servers/frameworks listed [here](technology-repositories.json). The current wordlists include:\n- Wordpress\n- Joomla\n- Drupal\n- Magento\n- Ghost\n- Tomcat\n\nThere are 2 versions of each wordlist:\n- Base (example [tomcat.txt](technologies/tomcat.txt)): Lists the full paths of each file in the repository\n```\nwebapps/examples/WEB-INF/classes/websocket/echo/servers.json\n```\n- All levels (example [tomcat-all-levels.txt](technologies/tomcat-all-levels.txt)): Includes all directory levels of the files in the base wordlist - if you have tried [dsieve](https://github.com/trickest/dsieve), this is going to look familiar! This wordlist will be larger than the base wordlist but it accounts for cases where the directory structure of the repository isn't mapped perfectly on the target.\n```\nwebapps/examples/WEB-INF/classes/websocket/echo/servers.json\nexamples/WEB-INF/classes/websocket/echo/servers.json\nWEB-INF/classes/websocket/echo/servers.json\nwebsocket/echo/servers.json\necho/servers.json\nservers.json\n```\n\n### Robots\nInspired by Daniel Miessler's [RobotsDisallowed](https://github.com/danielmiessler/RobotsDisallowed) project, these wordlists contain the `robots.txt` `Allow` and `Disallow` paths in the top 100, top 1000, and top 10000 websites according to [Domcop's Open PageRank dataset](https://www.domcop.com/top-10-million-websites).\n\n### Inventory Subdomains\nThis wordlist contains the subdomains found for each target on the [Inventory](https://github.com/trickest/inventory) project. It consists of 1.4 million words generated from the subdomains of over 50 public bug bounty programs.\n\n### Cloud Subdomains\nThis wordlist contains the subdomains found through enumerating [cloud](https://github.com/trickest/cloud) assets. It consists of 940k words generated from the subdomains extracted from the `Common Name`s and `Subject Alternative Name`s of over 7 million SSL certificates.\n\nAnd more wordlists to come!\n\n## How it Works\n### Technologies\nA [Trickest](https://trickest.com) workflow clones the repositories in [technology-repositories.json](technology-repositories.json), lists the paths of all their files, removes non-interesting files, generates combinations, and pushes the wordlists to this repository.\n![Trickest Workflow](images/technologies.png \"Trickest Workflow - wordlists/technolgies\")\n\n### Robots\nAnother [Trickest](https://trickest.com) workflow gets the top 100, 1000, and 1000 websites from [Domcop's Open PageRank dataset](https://www.domcop.com/top-10-million-websites), uses [meg](https://github.com/tomnomnom/meg) to fetch their `robots.txt` files (Thanks, [@tomnomnom](https://github.com/tomnomnom)!), removes irrelevant entries, cleans up the paths, and pushes the wordlists to this repository.\n![Trickest Workflow](images/robots.png \"Trickest Workflow - wordlists/robots\")\n\n## Contribution\nAll contributions/suggestions/questions are welcome! Feel free to create a new ticket via [GitHub issues](https://github.com/trickest/wordlists/issues), tweet at us [@trick3st](https://twitter.com/trick3st), or join the conversation on [Discord](https://discord.gg/7HZmFYTGcQ).\n\n## Build your own workflows!\nWe believe in the value of tinkering. Sign up for a demo on [trickest.com](https://trickest.com) to customize this workflow to your use case, get access to many more workflows, or build your own from scratch!\n\n[\u003cimg src=\"./banner.png\" /\u003e](https://trickest.io/auth/register)\n","funding_links":[],"categories":["Others","Miscellaneous"],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrickest%2Fwordlists","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Ftrickest%2Fwordlists","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Ftrickest%2Fwordlists/lists"}