Common File Paths and Usage in Web Enumeration
| Path to Include | Wordlist Name | Primary Purpose | Tool Used With |
|---|---|---|---|
/usr/share/wordlists/dirbuster/directory-list-2.3-medium.txt |
Directory List (Medium) | The best all-around list for finding hidden directories and files on web servers. | Gobuster, Dirbuster, FFUF |
/usr/share/wordlists/dirb/common.txt |
Common | A smaller, faster list of the most frequent directory names. | Gobuster, Dirb (Good for quick or recursive scans) |
/usr/share/wordlists/rockyou.txt |
Rockyou | Contains millions of real-world, leaked passwords. | Hydra, Hashcat (Used for cracking password hashes or brute-forcing login forms) |
/usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-5000.txt |
Subdomains | Used to discover hidden subdomains (e.g., dev.example.com). |
Gobuster (in dns mode), FFUF |