Supercharge Your Web Recon With Commonspeak
Evolutionary wordlist generation tool using Google BigQuery datasets for web application reconnaissance.
Summary
Web Recon Wordlists
Web application penetration testing requires understanding attack surface through large realistic wordlists of directories, files, and domains.
Commonspeak Tool
Commonspeak leverages Google's BigQuery platform to generate evolutionary wordlists reflecting current internet trends. Frequent dataset updates enable current wordlist generation.
Dataset Sources
Queries on BigQuery datasets including HTTPArchive, Stack Overflow, and HackerNews parse URLs to build realistic wordlists of directories, files, parameter names, and subdomains.
Commonspeak 2 Features
Scheduled wordlist creation, comprehensive GitHub queries, permutation engines for subdomain discovery, and asynchronous generation provide enhanced capabilities for modern reconnaissance.
Related talks
Recon Village·20 min
Utku Sen
Generating Personalized Wordlists by Analyzing Targets Tweets
Wild West Hackin' Fest·44 min
Presenters detail vulnerability discovery and exploitation in The World is Y0ur$: Geolocation based Wordlist Generation with Wordsmith.
Donald Pellegrino
Build a local, offline OSINT knowledge graph you can query without leaking the target.