Notes.Wordlists.txt

`` Passwords

    `` Fast bruteforcing with typical combinations and top lists

        - ~/lib/brutas/brutas-passwords-1-xxs.txt
        - /usr/share/seclists/Passwords/probable-v2-top1575.txt
        - /usr/share/seclists/Passwords/Common-Credentials/500-worst-passwords.txt

    `` Medium-weight, may generate too much traffic

        - ~/lib/brutas/brutas-passwords-2-xs.txt
        - ~/lib/brutas/brutas-passwords-3-s.txt
        - /usr/share/seclists/Passwords/probable-v2-top12000.txt
        - /usr/share/seclists/Passwords/Common-Credentials/10k-most-common.txt

    `` Heavy lists suitable for offline bruteforcing (> 300k)

        - ~/lib/brutas/brutas-passwords-4-m.txt
        - ~/lib/brutas/brutas-passwords-5-l.txt
        - ~/lib/brutas/brutas-passwords-6-xl.txt
        - /usr/share/seclists/Passwords/Leaked-Databases/md5decryptor-uk.txt

`` Usernames

    - ~/lib/brutas/brutas-usernames-small.txt
    - ~/lib/brutas/brutas-usernames.txt
    - /usr/share/seclists/Usernames/top-usernames-shortlist.txt
    - /usr/share/wordlists/metasploit/unix_users.txt
    - /usr/share/seclists/Usernames/Names/names.txt

`` Domains

    `` Light (< 4k)

        - ~/lib/brutas/brutas-subdomains-1-small.txt
        - /usr/share/seclists/Discovery/DNS/namelist.txt
        - /usr/share/dnsenum/dns.txt

    `` Heavy (> 100k)

        - ~/lib/brutas/brutas-subdomains-2-large.txt
        - /usr/share/seclists/Discovery/DNS/sortedcombined-knock-dnsrecon-fierce-reconng.txt
        - /usr/share/seclists/Discovery/DNS/bitquark-subdomains-top100000.txt
        - /usr/share/seclists/Discovery/DNS/subdomains-top1million-110000.txt

`` Ports

    - ~/lib/brutas/brutas-ports-tcp-http.txt
    - ~/lib/brutas/brutas-ports-tcp-public.txt
    - ~/lib/brutas/brutas-ports-tcp-internal.txt
    - /usr/share/seclists/Discovery/Infrastructure/nmap-top1000-ports.txt

`` HTTP paths

    - ~/lib/brutas/brutas-http-paths.txt
    - /usr/share/dirb/wordlists/common.txt
    - /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-small.txt
    - /usr/share/wordlists/dirbuster/directory-list-lowercase-2.3-medium.txt
    - /usr/share/wfuzz/wordlist/vulns/cgis.txt
    - /usr/share/seclists/Discovery/Web-Content/CGIs.txt
    - /usr/share/seclists/Discovery/Web-Content/CommonBackdoors-PHP.fuzz.txt
    - /usr/share/seclists/Fuzzing/fuzz-Bo0oM.txt

`` HTTP parameters

    - ~/lib/brutas/brutas-http-params.txt
    - /usr/share/seclists/Discovery/Web-Content/burp-parameter-names.txt