Built-in Wordlist

2,490+ curated URL paths

9 categories of URL paths for directory and endpoint discovery. Not for IDOR, passwords or parameter fuzzing — use the Upload tab for those.

📌

This wordlist contains URL paths only

Every entry is a URL path like /admin, /api/v1/users, /.env. Designed for directory and endpoint discovery. For IDOR IDs, passwords, usernames or parameter values — use the Upload Custom Wordlist tab in the tool.

✅ Good for:

→ Finding hidden directories (/admin, /backup)

→ Discovering API endpoints (/api/v1/users)

→ Locating sensitive files (/.env, /wp-config.php)

→ Finding admin panels (/phpmyadmin, /jenkins)

→ Discovering CMS paths (/wp-admin, /joomla)

→ Cloud paths (/.aws/credentials, /.git/HEAD)

❌ NOT for:

→ IDOR testing (needs numeric IDs: 1, 2, 3…)

→ Password brute-force (needs password lists)

→ Username enumeration (needs name lists)

→ Parameter value fuzzing (needs value lists)

→ Subdomain fuzzing (needs subdomain wordlist)

→ Header or cookie value fuzzing

💡 For these — use the Upload Custom Wordlist tab in the tool.

2,490

Total Paths

Categories

216

Sensitive Files

281

API Endpoints

184

Admin Panels

111

Cloud / DevOps

Use in Fuzzer →

Common Directories425

//admin/administrator/app/api/assets/auth/backup/bin/cache/cgi-bin/client/cms/config/console/content/core/css/dashboard/data

API Endpoints281

/api/api/v1/api/v2/api/v3/api/v4/api/v5/api/v1.0/api/v2.0/api/health/api/status/api/ping/api/info/api/docs/api/swagger/api/openapi/api/graphql/api/users/api/user/api/auth/api/login

Admin Panels184

/admin/administrator/administration/admin.php/admin.html/admin.asp/admin.aspx/admin.jsp/admin/login/admin/dashboard/admin/panel/admin/console/admin/config/admin/settings/admin/users/admin/user/admin/index/admin/index.php/admin/main/admin/home

Sensitive Files216

/.env/.env.local/.env.production/.env.development/.env.staging/.env.backup/.env.bak/.env.example/.env.sample/.env.old/.env.test/.env.dev/.env.prod/.env.stage/.env.2023/.env.2024/.env.2025/.git/.git/HEAD/.git/config

Backup & Legacy111

/backup/backups/bak/old/archive/archives/backup.sql/backup.zip/backup.tar.gz/backup.bak/backup.old/backup.rar/backup.7z/backup1.zip/backup2.zip/backup_2023.zip/backup_2024.zip/backup_2025.zip/backup-2023.zip/backup-2024.zip

CMS Paths123

/wp-admin/wp-admin/index.php/wp-admin/login/wp-login.php/wp-json/wp-json/wp/v2/wp-json/wp/v2/users/wp-json/wp/v2/posts/wp-json/wp/v2/pages/wp-json/wp/v2/media/wp-json/wp/v2/categories/wp-json/wp/v2/tags/wp-json/wp/v2/comments/wp-json/wp/v2/settings/wp-content/wp-content/uploads/wp-content/plugins/wp-content/themes/wp-content/debug.log/wp-content/mu-plugins

Cloud & DevOps111

/.aws/aws/s3/gcs/azure/gcp/cloud/.aws/credentials/.aws/config/terraform/terraform.tfstate/terraform.tfvars/.terraform/ansible/ansible.cfg/playbook.yml/inventory/hosts/k8s/kubernetes

Java / Spring85

/actuator/actuator/health/actuator/info/actuator/env/actuator/metrics/actuator/beans/actuator/mappings/actuator/httptrace/actuator/loggers/actuator/dump/actuator/heapdump/actuator/threaddump/actuator/scheduledtasks/actuator/caches/actuator/conditions/actuator/flyway/actuator/liquibase/actuator/jolokia/actuator/hawtio/actuator/configprops

PHP Apps74

/index.php/login.php/admin.php/config.php/settings.php/database.php/db.php/upload.php/download.php/install.php/setup.php/upgrade.php/migrate.php/update.php/cron.php/test.php/debug.php/info.php/phpinfo.php/status.php

Node.js / Express67

/package.json/package-lock.json/yarn.lock/pnpm-lock.yaml/node_modules/node_modules/.bin/node_modules/.cache/.nvmrc/.node-version/.npmrc/.yarnrc/.yarnrc.yml/server.js/app.js/index.js/main.js/start.js/server.ts/app.ts/index.ts