#Wordlist
Why do all these autocorrect facilities still use incomplete dictionaries, when a comprehensive English wordlist would only take up the storage of a handful of photos? 🙄
October 30, 2026 at 7:57 PM
dnscan: Scan Domains for DNS Subdomains
https://osrepos.com/repo/rbsec-dnscan?utm_source=bluesky

dnscan is a Python wordlist-based DNS subdomain scanner.

#opensource
dnscan: Scan Domains for DNS Subdomains
dnscan is a Python wordlist-based DNS subdomain scanner. It first attempts DNS zone transfers, then can discover names through recursive wordlist scans, with options for IPv6, alternate resolvers and TLD scanning.
osrepos.com
October 28, 2026 at 3:45 AM
apaprently the new typing of the dead minigame in ffxiv has a wordlist full of accented characters so rip to americans
October 28, 2026 at 9:49 AM
so we do have some ideas to tinker a bit with the wordlist, but you can (almost always) find an entry for the words through the Wordnik site with URLs like this:

wordnik.com/words/lis
wordnik.com/words/pree

I've been thinking a bit about how/where to expose that on the game page summary though too
November 1, 2026 at 7:35 PM
• 19 attacking addresses hit both servers, which points to a handful of human-run botnets sweeping the internet
• One group used a crypto-node wordlist (Solana, Ethereum, Firedancer) to hunt for blockchain servers to hijack
October 30, 2026 at 12:27 AM
Generate custom wordlists with Crunch

crunch 8 8 abc123 -o wordlist.txt

Join Bug Bounty USA Telegram channel for regular tips: t.me/bugbountyusa

#Crunch #BugBounty #Wordlist #KaliLinux #PasswordCracking
October 28, 2026 at 7:07 PM
How many words are in your 'wordlist'? Is it hundreds? Studying words for an hour seems like a lot. Are they single words or whole sentences?
October 27, 2026 at 12:52 AM
Is it the BIP-39 wordlist though? I thought about doing it that way (using the entropy directly) but it’s unfortunate to lose out on the possibility of 12-word passphrases
October 26, 2026 at 3:40 AM
A new test claims to catch AI agents that lie about finishing tasks. The catch: masking the 30 keywords used to build the labels moved the detector's score from 0.940 to 0.939. It's not catching deception, it's reading the same wordlist.
October 28, 2026 at 4:47 PM
I love wordlist play... "beta hunk" hahahh.

here's mine

washateria
blammo
daisydukes
auditioned
squinting
aisle drama
forced proximity
sunshine crops
leavers
October 26, 2026 at 1:58 PM
My first go at this was I think also the bip39 wordlist but with 24 words and no extra hashing step, but I also think doing 12 words and the normal derivation seems wise. I guess the downside is that if you got a raw key from somewhere else (eg self-hosted PDS) you can't go back to a seed phrase.
October 26, 2026 at 5:43 AM
Kali Tool Tip: Hashcat

Save your settings so you stop retyping them: keep your go-to mode and attack flags in a shell alias or a .hc notes file, e.g. alias hcrack='hashcat -m 1000 -a 0 -O -w 3'. Set the mode and workload once, swap only the hash and wordlist.

#KaliLinux #Hashcat #InfoSec
Bug Bounty USA
Bug Bounty Tips Telegram channel gives you tips about bug bounty. Happy Hacking! yogsec.net
t.me
October 27, 2026 at 12:00 PM
CVE-2026-117569 - Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters
CVE ID : CVE-2026-117569

Published : Oct. 27, 2026, 2:16 p.m. | 7 minutes ago

Description : Kali-GPT through commit a608c74 contains an OS command injection vulnerabili...
CVE-2026-117569 - Kali-GPT through commit a608c74 OS Command Injection via MCP Scanner Tool Parameters
Kali-GPT through commit a608c74 contains an OS command injection vulnerability in execute_tool() in kali_gpt/tools/mcp_server.py that allows MCP clients to run commands via unsanitized scanner parameters. Attackers or prompt-injected agents can embed shell metacharacters in parameters like target, ports, domain, wordlist, or url, executed via subprocess.run with shell=True as the MCP …
cvefeed.io
October 27, 2026 at 3:08 PM
When you rely on finding web applications to attack via wordlists, you want a criticality sorted wordlist. Which helps you sort it if you have very little time available.

#hacklu2026
October 23, 2026 at 6:34 AM
A password-filter wordlist is only useful when it reflects local vocabulary. Build it from internal tools, site codes, product names, team abbreviations, locations, and team names. Which local source would you check to verify the terms? #ActiveDirectory #PasswordFilter #CyberSecurity
October 22, 2026 at 8:21 AM
nerdlegame 1735 3/6
Dungleon 1718 2/6💠
Squardle 1720 6 Guesses Remaining
Referdle 1425 X/25

Early successes got me cocky, I forgot that Referdle has an annoying wordlist. A dire omen for today. Don't get complacent.
October 20, 2026 at 2:34 PM
Zelda: The Island ​o Catchin Flees - Scottish Translation (Complete) (GB) Added
Zelda: The Island o Catchin Flees - Scottish Translation - Content
The Legend of Zelda: Link’s Awakening DX, fully translated to Scots. There is no unique language category for “Scots” so it has been uploaded to the “Scottish” category. There is a matching wordlist a...
romhack.ing
October 19, 2026 at 1:53 AM
324 lines of Python that crawl web forms, inject payloads from a wordlist, and flag reflected XSS. Built for pentesters, not beginners. #python #security #infosec https://www.valtersit.com/python/xss-payload-scanner-for-web-forms/
XSS Payload Scanner for Web Forms
www.valtersit.com
October 20, 2026 at 9:00 AM
[BLACK MIRROR EPISODE WHERE DELETING SOMETHING FROM YOUR WORDLIST DELETES IT FROM REAL LIFE]
CONSTRUCTOR: “hey Have you seen anyone OGLE or LEER today ?”
FRIEND: ‘’Yes. A bunch of times actually”
[This constructor is SICK!!!!!!]
October 17, 2026 at 11:51 PM
237 lines of Python that brute-forces subdomains with asyncio and dnspython. Intermediate pentest recon. Run: python3 subdomain_enum.py --domain example.com --wordlist wordlist.txt
https://www.valtersit.com/python/subdomain-enumeration-tool/
#security #python #pentest
Subdomain Enumeration Tool
www.valtersit.com
October 18, 2026 at 4:00 PM
I'm sure they're randomly picked from a wordlist, anyway, if you're curious:

bsky-debug.app
Bluesky Debug
bsky-debug.app
October 16, 2026 at 11:02 PM
it stands for dictionary I swear
October 15, 2026 at 1:06 PM
Local vocabulary belongs in your custom password-filter wordlist:
• Internal tools
• Product names
• Team abbreviations

Review each term with the teams that use it before adding it to local policy. #ActiveDirectory #WindowsServer #Cybersecurity #PasswordAudit
October 15, 2026 at 8:21 AM
Zuzhat is called Zuzar in the fanfic, but that name was one I picked on the fly and I never quite liked it. I think it's from the Land Of Shadow Orcish wordlist and means "corsair".
October 12, 2026 at 2:47 PM