From 170632eab26fe4018db887b3977ad812f48f6f72 Mon Sep 17 00:00:00 2001 From: six2dez Date: Tue, 17 Nov 2020 11:37:06 +0100 Subject: [PATCH] v2 README update --- README.md | 51 +++++++++++++++++++++++++++++++++++++++++++++++---- 1 file changed, 47 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 8fcf45b..4c103a1 100644 --- a/README.md +++ b/README.md @@ -1,7 +1,7 @@ # OneListForAll -**Rockyou for web fuzzing** +**Rockyou for web fuzzing** -**Wordlist in releases section** +**V2 released!** Now you can build your own wordlists with the same method and this release includes a **short** wordlist. Base wordlists provided in /dict folder. **See Method 3** ## Usage @@ -11,7 +11,7 @@ 2. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :) ```bash -ffuf -c -mc all -ac -w onelistforall.txt -u [target.com]/FUZZ +ffuf -c -w onelistforall.txt -u [target.com]/FUZZ ``` ### Method 2 @@ -23,9 +23,52 @@ git clone https://github.com/six2dez/OneListForAll && cd OneListForAll ``` 2. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :) ```bash -ffuf -c -mc all -ac -w onelistforall.txt -u [target.com] +ffuf -c -w onelistforall.txt -u [target.com]/FUZZ ``` +### Method 3 + +**Build your own wordlists!** + +1. Add your wordlists to dict/ folder with suffix **_short.txt** for short wordlist and **_long.txt** for the full wordlist. + +2. Run ./olfa.sh (olfa -> One List For All) and you will have onelistforall.txt file and onelistforallshort.txt. + +3. Fuzz with the best tool [ffuf](https://github.com/ffuf/ffuf) :) +```bash +ffuf -c -w onelistforall.txt -u [target.com]/FUZZ +``` + +## Wordlists content + +In the fields that both lists coincide, the short one has the content but in less quantity, only the most relevant. + +Both lists have: + +- First slash (/) removed, lines that have it is on purpose. +- Removed special chars or crash chars such as `' sqlis, xss, etc +- Trimmed trailing whitespaces +- Removed comments (lines starting with #) + +| Year | Short | Full | +| ---- | ----------------- | -------------------| +| Size | 5M | 180M | +| Lines | 344644 | 9117326 | +| Extension specific | ✓ | :heavy_check_mark: | +| Config files | ✓ | :heavy_check_mark: | +| Admin panels | ✓ | :heavy_check_mark: | +| Dotfiles | ✓ | :heavy_check_mark: | +| Backup files/folders | ✓ | :heavy_check_mark: | +| LFI | ✓ | :heavy_check_mark: | +| Multilanguage dicts | ✓ | :heavy_check_mark: | +| Extension specific | ✓ | :heavy_check_mark: | +| CMS specific | ✓ | :heavy_check_mark: | +| Robots Disallowed | ✓ | :heavy_check_mark: | +| Software specific | ✓ | :heavy_check_mark: | +| Usernames | ✗ | :heavy_check_mark: | +| Words | ✗ | :heavy_check_mark: | +| Subdomains | ✗ | :heavy_check_mark: | + ## Sources This is a wordlist for fuzzing purposes made from the best wordlists currently available, lowercased and deduplicated later with [duplicut](https://github.com/nil0x42/duplicut). The lists used have been some selected within these repositories: