api parameter wordlist - SERP Analysis

https://github.com/chrislockard/api_wordlist

https://gist.github.com/helcaraxeals/7c45201b1c957ecea82ef7800da4bfa4

https://danaepp.com/finding-hidden-api-parameters

https://www.reddit.com/r/bugbounty/comments/1brn3u1/looking_for_api_fuzzing_wordlists/

https://exploit-notes.hdks.org/exploit/web/api/

https://docs.akto.io/test-editor/concepts/test-yaml-syntax-detailed/wordlists

https://www.sqrsec.com/api-fuzzing-lists

https://pentest-tools.com/docs/api/v2/wordlists

https://wordlists.assetnote.io/

https://blackhawkk.medium.com/exploiting-server-side-parameter-pollution-in-a-rest-api-d3a9b30212cb

https://pentestbook.six2dez.com/enumeration/webservices/apis

https://docs.ethers.org/v6-beta/api/wordlists/

https://aimasterprompt.medium.com/collection-of-wordlists-for-bug-bounty-hunters-a07c0dee92ff

https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/12-API_Testing/01-API_Reconnaissance

https://danaepp.com/fuzzing-json-to-find-api-security-flaws

https://rashahacks.com/parameter-enumeration/

https://zerodayhacker.com/discover-api-endpoints-with-feroxbuster/

https://portswigger.net/web-security/api-testing

https://sanjaymenon.xyz/blog/api-wordlists/

https://www.linkedin.com/posts/raviraj-iq-10a5961b2_api-fuzzing-wordlist-to-test-for-potential-activity-7127328007630766080-5IKj

http://ffuf.me/wordlists

https://www.yeswehack.com/learn-bug-bounty/discover-map-hidden-endpoints-parameters

https://swisskyrepo.github.io/PayloadsAllTheThings/Hidden%20Parameters/

https://gowthams.gitbook.io/bughunter-handbook/fuzzing-wordlists

https://www.assetnote.io/resources/research/contextual-content-discovery-youve-forgotten-about-the-api-endpoints

https://learn.microsoft.com/en-us/javascript/api/word/word.list?view=word-js-preview

https://www.linkedin.com/posts/mohammed-aljayzani-profile_github-z5jtapi-documentation-wordlist-activity-7272286227104448515-mc1z

https://escape.tech/blog/graphql-security-wordlist/

https://security.stackexchange.com/questions/149110/creating-a-wordlist-knowing-parameters

https://m.youtube.com/watch?v=fvcKwUS4PTE&t=0s

https://www.intigriti.com/researchers/blog/hacking-tools/finding-hidden-input-parameters

https://textblob.readthedocs.io/en/dev/api_reference.html

https://www.freecodecamp.org/news/web-security-fuzz-web-applications-using-ffuf/

https://www.youtube.com/watch?v=M_guA0wjrLg

https://www.phrack.me/tools/2022/07/06/Ffuf-cheatsheet.html

https://hipstapas.dev/docs

https://www.kali.org/tools/wfuzz/

https://hackviser.com/tactics/tools/ffuf

https://raw.githubusercontent.com/onvio/wordlists/master/words_and_files_top5000.txt

https://www.bugbountyhunter.com/guides/?type=apitesting

https://www.thehacker.recipes/web/inputs/api

https://www.intigriti.com/researchers/blog/hacking-tools/creating-custom-wordlists-for-bug-bounty-targets-a-complete-guide

https://forum.hackthebox.com/t/api-attacks-broken-authentication/320020

https://docs.oracle.com/cd/F39904_01/spgjv/oracle/pg/rdbms/index/oratext/OracleTextIndexParameters.html

https://hacklido.com/blog/969-directory-fuzzing-and-hidden-resources-using-ffuf-effectively

https://www.sketchengine.eu/documentation/api-documentation/

https://developers.google.com/style/word-list

https://password.ninja/api

https://parrot-ctfs.com/blog/ffuf-fuzz-faster-u-fool-cheat-sheet/

https://blog.sec-it.fr/en/2021/03/02/web-wordlists/

https://docs.gitlab.com/user/application_security/api_fuzzing/

https://abrictosecurity.com/gobuster-directory-enumerator-cheat-sheet/

https://random-word-api.herokuapp.com/home

https://www.algoexpert.io/frontend/coding-questions/wordle

https://www.techtarget.com/searchsecurity/feature/How-to-use-Wfuzz-to-find-web-application-vulnerabilities

https://detectify.com/assets/pdf/Find-More-Vulnerabilities-Through-Fuzzing-APIs-Whitepaper-by-Alissa-Knight-Detectify.pdf

https://cloud.google.com/bigquery/docs/samples/bigquery-query-params-named-types

https://pentest-tools.com/website-vulnerability-scanning/discover-hidden-directories-and-files

https://attack.mitre.org/techniques/T1595/003/

https://www.kali.org/tools/arjun/

https://hackertarget.com/gobuster-tutorial/

https://null-byte.wonderhowto.com/how-to/fuzz-parameters-directories-more-with-ffuf-0330806/

https://book.martiandefense.llc/notes/appsec/checklists/api-testing-checklist

https://manpages.ubuntu.com/manpages/lunar/man1/arjun.1.html

https://www.vaadata.com/blog/graphql-api-vulnerabilities-common-attacks-and-security-tips/

https://wiki.pentestlist.com/offensive-security/web-application/discovery/parameter-discovery

https://www.hackingarticles.in/wordlists-for-pentester/

https://docs.webspellchecker.com/display/WebSpellCheckerServer55x/Using%2BWebSpellChecker%2BServer%2BWeb%2BAPI

https://www.thehacker.recipes/web/recon/directory-fuzzing

https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/administrating/administer-records/global-system-option-records-gso/password-phrase-reserved-word-list--pwpreswd-.html

https://infosecwriteups.com/attacking-web-applications-with-ffuf-solving-the-ctf-challenge-c22263cf67e1

https://docs.h4rithd.com/tools/fuzzing-brute-force

https://affinesecurity.gitlab.io/posts/bookstore-tryhackme-writeup/

https://www.geeksforgeeks.org/gobuster-penetration-testing-tools-in-kali-tools/

https://enlacehacktivista.org/index.php/Hacking_APIs

https://cran.r-project.org/web/packages/keyToEnglish/readme/README.html

http://michalszalkowski.com/security/enumeration/enumeration-web/

https://learn.microsoft.com/en-us/rest/api/searchservice/indexes/list?view=rest-searchservice-2024-07-01

https://www.freecodecamp.org/news/how-to-fuzz-hidden-directories-files-with-ffuf/

https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/burp-parameter-names.txt

https://vulnableone.gitbook.io/vulnableone/offensive-treasure/red-team/reconnaissance/active-scanning/wordlist-scanning

https://pyenchant.github.io/pyenchant/api/enchant.html

https://stackoverflow.com/questions/42052244/how-to-create-a-word-list-made-up-of-the-words-from-file

https://portswigger.net/burp/documentation/desktop/tools/intruder/configure-attack/payload-types

https://dev.epicgames.com/documentation/en-us/unreal-engine/epic-cplusplus-coding-standard-for-unreal-engine

https://www.getastra.com/blog/api-security/api-security-testing/

https://www.zaproxy.org/docs/desktop/addons/fuzzer/

https://developer.wordnik.com/changelog

https://docs.couchbase.com/server/current/n1ql/n1ql-rest-api/exnamed.html

https://scikit-learn.org/stable/modules/generated/sklearn.feature_extraction.text.CountVectorizer.html

https://agrohacksstuff.io/posts/web-penetration-test-enumeration-guide/

https://rapidapi.com/blog/api-glossary/parameters/

https://blog.cyberadvisors.com/technical-blog/blog/graphql-apis-enumeration-basics

https://www.yeswehack.com/learn-bug-bounty/parameter-discovery-quick-guide-to-start

https://0ut3r.space/2024/01/20/fuzz-the-world/

https://www.adaxes.com/questions/15325/custom-script-for-generating-passwords

https://techdocs.broadcom.com/us/en/ca-mainframe-software/security/ca-acf2-for-z-os/16-0/administrating/administer-records/global-system-option-records-gso/reserved-word-list-resword.html

https://www.cybrary.it/blog/create-word-list-kali-using-crunch

https://www.hackingarticles.in/a-detailed-guide-on-wfuzz/

https://notes.benheater.com/books/web/page/parameter-and-value-fuzzing