wordlist

Manage wordlists for enumeration.

Usage

wordlist SUBCOMMAND [options]

Subcommands

show

List available wordlists.

wordlist show

Output:

Available built-in wordlists:
  - users
  - config
  - passwords
  - functions
  - database
  - storage
  - security
  - all

show <name>

Display wordlist contents.

wordlist show users

Output:

Contents of wordlist 'users':
  user
  users
  User
  Users
  USER
  USERS
  account
  accounts
  ...

add <name> <words>

Create session wordlist.

wordlist add custom admin,secret,internal

Then use:

scan --rtdb -l custom

Built-in wordlists

Name	Terms	Description
users	45+	User-related paths
config	60+	Configuration data
passwords	50+	Auth-related paths
functions	80+	Function names
database	70+	Database paths
storage	40+	Storage paths
security	40+	Admin/security terms
all	200+	All combined

Case variations

Each term generates 3 variations:

users → users, Users, USERS

Examples

View available wordlists

wordlist show

See wordlist contents

wordlist show config

Create custom wordlist

wordlist add mylist admin,root,superuser
scan --rtdb -l mylist

Use in scans

scan --rtdb -l users
scan --firestore -l config
scan --all -l all

See also

• scan - Use wordlists in scans
• Scan Types - Scan documentation