This forum is closed as of March 2023.

Seclist

gobuster dir -u https://target.com -w seclist/Discovery/Web_Content/common.txt -t 50

1. Overview SecList is a curated collection of wordlists, fuzzing payloads, and enumeration resources specifically designed for security professionals, penetration testers, and bug bounty hunters. It consolidates the most effective publicly available lists and adds custom categories to accelerate discovery of hidden endpoints, parameters, directories, subdomains, and sensitive files during web application and infrastructure assessments. seclist

wfuzz -c -z file,seclist/Payloads/XSS/xss_vectors.txt https://target.com/search?q=FUZZ gobuster dir -u https://target