Gobuster Wordlist ((top)) May 2026

wp-admin, wp-content, wp-includes, administrator, admin, backup, old, temp, dev, test, api, v1, v2, assets crunch 4 6 abc123 -o short-passwords.txt 5. Merge & deduplicate multiple wordlists cat list1.txt list2.txt | sort -u > merged.txt Using Wordlists with Gobuster – Examples Directory brute-force (default) gobuster dir -u http://target.com -w /usr/share/wordlists/dirb/common.txt Faster scanning with extensions gobuster dir -u http://target.com -w /usr/share/wordlists/seclists/Discovery/Web-Content/common.txt -x php,html,txt,bak Subdomain enumeration gobuster dns -d target.com -w /usr/share/wordlists/seclists/Discovery/DNS/subdomains-top1million-5000.txt Vhost enumeration gobuster vhost -u http://target.com -w /usr/share/wordlists/seclists/Discovery/Web-Content/raft-large-directories-lowercase.txt Pro Tips for Wordlist Optimization | Problem | Solution | |---------|----------| | Too many false positives | Filter status codes: -s 200,204,301,302,307,403 | | Too slow | Use -t 50 (50 threads) + smaller wordlist first | | Target blocks requests | Use --delay 200ms or --random-agent | | Case-sensitive server | Try lowercase + uppercase wordlist variants | Recommended Starter Wordlist Set Save this as gobuster-quick.txt :