assetnote / Wordlists

Assetnote Wordlists

See and download all the wordlists at https://wordlists.assetnote.io/

When performing security testing against an asset, it is vital to have high quality wordlists for content and subdomain discovery. This website provides you with wordlists that are up to date and effective against the most popular technologies on the internet.

Wordlists are generated on the 28th of each month, using Commonspeak2 and GitHub Actions. If there's an extension or technology that you would like a wordlist for, but it's not included in this repo, send us a PR and it will be included on this page after the next run.

Assetnote Continuous Security automatically maps your external assets and monitors them for changes and security issues to help prevent serious breaches. If you want to protect your attack surface and would like a demonstration of our product, please reach out to us by submitting our contact form.

Download all wordlists

You can download all the wordlists generated by this project by using the following command:

aws s3 sync s3://assetnote-wordlists/data/ ./assetnote-wordlists --no-sign-request

How this repo works

On the 28th of every month, GitHub actions are used to generate wordlists using Commonspeak2. These wordlists are then committed to Amazon S3.

As a part of the GitHub actions, JSON files are generated using the gen-json.py script. These JSON files are also pushed to the repo, and then are loaded in index.html using DataTables.

Credits

• cqsd for his initial work on automating Commonspeak2 with GitHub actions.
• SecLists for their excellent wordlists for content discovery.

License

   Copyright 2020 Assetnote

   Licensed under the Apache License, Version 2.0 (the "License");
   you may not use this file except in compliance with the License.
   You may obtain a copy of the License at

       http://www.apache.org/licenses/LICENSE-2.0

   Unless required by applicable law or agreed to in writing, software
   distributed under the License is distributed on an "AS IS" BASIS,
   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
   See the License for the specific language governing permissions and
   limitations under the License.

Assetnote Pty. Ltd. - Twitter @assetnote