> For the complete documentation index, see [llms.txt](https://cajac.gitbook.io/ctf-notes/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://cajac.gitbook.io/ctf-notes/web/web-discovery/wordlists-for-web-enumeration.md).

# Wordlists for Web Enumeration

The following wordlists can be used for web enumeration:

## API endpoints

<table><thead><tr><th width="344">Wordlist</th><th width="143">#Words</th><th>Comment</th></tr></thead><tbody><tr><td>/usr/share/seclists/Discovery/Web-Content/api/api-endpoints.txt</td><td>269</td><td>Includes entries such as:<br><code>/api/auth</code> and <code>/api/token</code> </td></tr><tr><td></td><td></td><td></td></tr><tr><td></td><td></td><td></td></tr></tbody></table>

## Files and directories

<table><thead><tr><th width="340">Wordlist</th><th width="146">#Words</th><th>Comment</th></tr></thead><tbody><tr><td>/usr/share/wordlists/dirb/common.txt</td><td>4 614</td><td>Fast initial wordlist to use</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/common.txt</td><td>4 746</td><td>Fast initial wordlist to use</td></tr><tr><td>/usr/share/wordlists/seclists/Discovery/Web-Content/big.txt</td><td>20 478</td><td>Fast initial wordlist to use</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-medium-directories.txt</td><td>29 999</td><td>Small alternative</td></tr><tr><td>/usr/share/wfuzz/wordlist/general/megabeast.txt</td><td>45 459</td><td>General wordlist</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-large-directories.txt</td><td>62 281</td><td>Good starting point</td></tr><tr><td>/usr/share/wordlists/dirbuster/directory-list-2.3-small.txt</td><td>87 664</td><td>Good starting point</td></tr><tr><td>/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt</td><td>220 560</td><td>The default wordlist for more thorough scan</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/directory-list-2.3-big.txt</td><td>1 273 832</td><td>I really don't want to miss anything...</td></tr></tbody></table>

## Files only

<table><thead><tr><th width="345">Wordlist</th><th width="146">#Words</th><th>Comment</th></tr></thead><tbody><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-small-files-lowercase.txt</td><td>10 848</td><td>Fast initial wordlist to use, lower-case only</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-small-files.txt</td><td>11 424</td><td>Fast initial wordlist to use</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-medium-files-lowercase.txt</td><td>16 244</td><td>A bit larger alternative, lower-case only</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-medium-files.txt</td><td>17 129</td><td>A bit larger alternative</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-large-files-lowercase.txt</td><td>35 325</td><td>For a more thorough scan, lower-case only</td></tr><tr><td>/usr/share/seclists/Discovery/Web-Content/raft-large-files.txt</td><td>37 050</td><td>For a more thorough scan</td></tr></tbody></table>

## Resources

username-lists - nyxgeek - GitHub: <https://github.com/nyxgeek/username-lists>