Recon Wordlist Generator
Build a target-specific discovery wordlist from pages, scripts and URLs you already have: words, paths, parameters and subdomain labels, ranked by frequency.
Runs in your browser Your input never leaves your device.
The list is built in your browser from the text you give it. Nothing is looked up or sent. Use it only against systems you are authorised to test. It makes discovery words, not password guesses.
Report a problem with this tool
About this tool
Generic wordlists miss the names a particular application actually uses. This tool builds a list from text you already hold about the target, such as page source, JavaScript bundles, crawled URLs, documentation or notes. It reads four kinds of word: words and identifiers (camelCase, snake_case and kebab-case are split, so getOrderHistory gives get, order and history), URL path segments and file names (with and without the extension, skipping numeric, UUID and long hex identifiers), query parameter names, and subdomain labels (without the registrable domain). Words are counted and ranked by how often they appear, with options for alphabetical or first-seen order, minimum and maximum length, lower case or original case, dropping common English and programming words, and keeping bare numbers. Optional variants help content discovery: add file extensions you choose, common backup and copy suffixes (.bak, .old, ~, .orig, .swp, _old, .zip, .sql and others), joined neighbouring word pairs (payment-gateway, payment_gateway, paymentgateway), capitalised copies and plural or singular forms. The output is capped at a limit you set and deduplicated (exactly, so with lower case off, Admin and admin are different entries). The word source (splitting, filtering, counts and order) was compared with an independent Python implementation on random text; paths, parameters and host labels are checked on hand-built input. The tool deliberately makes discovery words, not password guesses: it has no leetspeak, date or password-pattern rules. Run the list only against systems you are authorised to test, with your own tooling; nothing is sent from this page.
How to use it
- Paste text from the target, or load files such as saved pages and scripts.
- Choose which kinds of words to take and the length limits.
- Optionally add extensions, backup suffixes, joined pairs or other variants.
- Generate, then copy or download the list for your own tools.
Common problems
- The list is mostly noise
- Keep the common-word filter on, raise the shortest word length, or use only paths and parameters as sources. Frequency order puts the most repeated words first.
- It stops at the limit
- Variants multiply the list quickly. Turn off some variants or raise the limit.
- No words found
- Lower the minimum length, turn off the common-word filter, or check that the sources you ticked match what you pasted.