diff --git a/README.md b/README.md index 25d29a9..272a419 100644 --- a/README.md +++ b/README.md @@ -48,8 +48,9 @@ docker run --rm nikitastupin/clairvoyance --help ### Which wordlist should I use? -There are at least two approaches: +There are at least three approaches: +- Use one of the [wordlists](https://github.com/Escape-Technologies/graphql-wordlist) collected by Escape Technologies - Use general English words (e.g. [google-10000-english](https://github.com/first20hours/google-10000-english)). - Create target specific wordlist by extracting all valid GraphQL names from application HTTP traffic, from mobile application static files, etc. Regex for GraphQL name is [`[_A-Za-z][_0-9A-Za-z]*`](http://spec.graphql.org/June2018/#sec-Names).