Wordlists

What would a web fuzzer be without wordlists?

Named wordlists

Assigning names allows you to reference your wordlists later in other options, such as filters (--wf) or in the URL directly.

When specifying a wordlist, you can use the following syntax:

rwalk https://example.com path/to/wordlist:ALIAS

And then use it:

rwalk https://example.com/ALIAS path/to/wordlist:ALIAS --mode template

rwalk https://example.com/ path/to/wordlist:ALIAS --wf [ALIAS]length:<5

On-the-fly modifications

Transformations can be applied to each wordlist entry at runtime with the --transform (or -t) option. Specify more of them by separating with a ;.

Name	Aliases	Usage
`case`	`c`	`case:lower, case:lower, case:title`
`replace`	`rp`, `sub`	`replace:foo, replace:bar`
`remove`	`r`, `rm`	`remove:foo`
`prefix`	`p`	`prefix:foo`
`suffix`	`s`	`suffix:bar`
`encode`	`e`, `enc`	`encode:url, encode:base64, encode:hex`

Merging wordlists

Need to combine wordlists? Use the --merge (or --mw) option:

rwalk ... list1.txt:foo list2.txt:bar --merge foo,bar:combined

This creates a new wordlist with alias combined containing all entries from both foo and bar.

info

Merging is done after filtering and transformations. This allows you to create variations of a wordlist and use them together.

For example, to fuzz with both uppercase and lowercase versions:

rwalk ... list.txt:UP list.txt:LO -t "[UP]case:upper; [LO]case:lower" \ 
  --merge UP,LO:MERGED

Comments in wordlists

rwalk automatically:

Skips empty lines
Ignores lines starting with #
Trims comments after a space and # character

If you want to include comment lines, use the --include-comments flag.