trickest/wordlists resource
Real-world infosec wordlists, updated regularly observed · 2026-08-28
Health v2 · maintenance only
77/100
- Activity 99
- Release rhythm 35
- Longevity 100
Flags: no_releases
How is this computed?
round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10) — computed 2026-09-02. Adoption (stars, forks) is never an input.
- gap_med: n/a
- age_days: 1484
- days_rel: n/a
- days_push: 7
- n_releases_24m: 0
Adoption not part of the score
1791 stars · 207 forks observed · 2026-08-28
What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded
A regularly updated collection of real-world infosec wordlists maintained by Trickest, including technology-specific path lists (WordPress, Joomla, Drupal, Magento, Ghost, Tomcat), robots.txt-derived paths from top websites, and subdomain wordlists from bug bounty programs and SSL certificates. It is a data repository rather than a tool, intended to feed fuzzing and enumeration tools.
Use cases
- find wordlists for directory bruteforce during a pentest
- get content discovery wordlists for bug bounty hunting
- need a subdomain wordlist built from real bug bounty data
- find technology-specific path wordlists for WordPress or Tomcat
- want robots.txt-derived wordlists from top websites
- need regularly updated wordlists for fuzzing tools like ffuf or gobuster
When to choose
- you need real-world, regularly refreshed wordlists for content discovery or subdomain enumeration
- you want technology-specific path lists derived from actual CMS/framework source code
- you need curated subdomain lists sourced from bug bounty programs and SSL certificates
When to avoid
- you need a wordlist generator tool rather than prebuilt lists
- you need general-purpose password cracking wordlists like rockyou
- you require wordlists for non-web attack surfaces such as SSH or databases
Facets
dataset · maturity active
security penetration-testing web-scraping data-generation security penetration-testing crawlers cross-platform cli wordlists bugbounty content-discovery directory-bruteforce reconnaissance subdomain-enumeration infosec
7 sources
- readme: https://github.com/trickest/wordlists · fetched 2026-08-28 · a9e85e77f529
- homepage: https://trickest.com · fetched 2026-08-29 · e7343ce3c591
- site_page: https://trickest.com/docs/introduction · fetched 2026-08-29 · ce06621f5c50
- site_page: https://trickest.com/docs/releases/changelog · fetched 2026-08-29 · 9027fd231153
- site_page: https://trickest.com/about-us · fetched 2026-08-29 · a4955c35541b
- site_page: https://trickest.com/pricing · fetched 2026-08-29 · dd1333d2be9e
- site_page: https://trickest.com/platform/cli · fetched 2026-08-29 · b82aef12b4ca
Member repositories
| Repository | Role | Health v2 |
|---|---|---|
| trickest/wordlists | main | 77 |
For agents
markdown · JSON · MCP: product_card(name="trickest/wordlists")
Data as of 2026-08-30T08:39:29.467469+00:00 · Report a problem