> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/enum/web-discovery/wordlists-for-web-enumeration.md).

# Wordlists for Web Enumeration

The following wordlists can be used for web enumeration:

## File and directory enumeration

<table><thead><tr><th width="412">Wordlist</th><th width="106">#Words</th><th>Comment</th></tr></thead><tbody><tr><td>/usr/share/wordlists/dirb/common.txt</td><td>4 614</td><td> Small initial wordlist to use</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt</td><td>29 999</td><td>Small alternative</td></tr><tr><td>/usr/share/wfuzz/wordlist/general/megabeast.txt</td><td>45 459</td><td>General wordlist</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-large-directories.txt</td><td>62 281</td><td>Good starting point</td></tr><tr><td>/usr/share/wordlists/dirbuster/directory-list-2.3-small.txt</td><td>87 664</td><td>Good starting point</td></tr><tr><td>/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt</td><td>220 560</td><td>The default wordlist for more thorough scan</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/directory-list-2.3-big.txt</td><td>1 273 832</td><td>I really don't want to miss anything...</td></tr></tbody></table>

## Virtual host enumeration

<table><thead><tr><th width="410">Wordlist</th><th width="109">#Words</th><th>Comment</th></tr></thead><tbody><tr><td>/usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-5000.txt</td><td>4 989</td><td></td></tr><tr><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td></tr></tbody></table>