Skip to content

Commit

Permalink
v2 README update
Browse files Browse the repository at this point in the history
  • Loading branch information
six2dez committed Nov 17, 2020
1 parent 9b8e76b commit 170632e
Showing 1 changed file with 47 additions and 4 deletions.
51 changes: 47 additions & 4 deletions README.md
Original file line number Diff line number Diff line change
@@ -1,7 +1,7 @@
# OneListForAll
**Rockyou for web fuzzing**
**Rockyou for web fuzzing**

**Wordlist in releases section**
**V2 released!** Now you can build your own wordlists with the same method and this release includes a **short** wordlist. Base wordlists provided in /dict folder. **See Method 3**

## Usage

Expand All @@ -11,7 +11,7 @@

2. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :)
```bash
ffuf -c -mc all -ac -w onelistforall.txt -u [target.com]/FUZZ
ffuf -c -w onelistforall.txt -u [target.com]/FUZZ
```

### Method 2
Expand All @@ -23,9 +23,52 @@ git clone https://github.com/six2dez/OneListForAll && cd OneListForAll
```
2. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :)
```bash
ffuf -c -mc all -ac -w onelistforall.txt -u [target.com]
ffuf -c -w onelistforall.txt -u [target.com]/FUZZ
```

### Method 3

**Build your own wordlists!**

1. Add your wordlists to dict/ folder with suffix **_short.txt** for short wordlist and **_long.txt** for the full wordlist.

2. Run ./olfa.sh (olfa -> One List For All) and you will have onelistforall.txt file and onelistforallshort.txt.

3. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :)
```bash
ffuf -c -w onelistforall.txt -u [target.com]/FUZZ
```

## Wordlists content

In the fields that both lists coincide, the short one has the content but in less quantity, only the most relevant.

Both lists have:

- First slash (/) removed, lines that have it is on purpose.
- Removed special chars or crash chars such as `' sqlis, xss, etc
- Trimmed trailing whitespaces
- Removed comments (lines starting with #)

| Year | Short | Full |
| ---- | ----------------- | -------------------|
| Size | 5M | 180M |
| Lines | 344644 | 9117326 |
| Extension specific | ✓ | :heavy_check_mark: |
| Config files | ✓ | :heavy_check_mark: |
| Admin panels | ✓ | :heavy_check_mark: |
| Dotfiles | ✓ | :heavy_check_mark: |
| Backup files/folders | ✓ | :heavy_check_mark: |
| LFI | ✓ | :heavy_check_mark: |
| Multilanguage dicts | ✓ | :heavy_check_mark: |
| Extension specific | ✓ | :heavy_check_mark: |
| CMS specific | ✓ | :heavy_check_mark: |
| Robots Disallowed | ✓ | :heavy_check_mark: |
| Software specific | ✓ | :heavy_check_mark: |
| Usernames | ✗ | :heavy_check_mark: |
| Words | ✗ | :heavy_check_mark: |
| Subdomains | ✗ | :heavy_check_mark: |

## Sources

This is a wordlist for fuzzing purposes made from the best wordlists currently available, lowercased and deduplicated later with [duplicut](https://github.com/nil0x42/duplicut). The lists used have been some selected within these repositories:
Expand Down

0 comments on commit 170632e

Please sign in to comment.