From 9786a537d2ba6e307410b75c41cc31603610974b Mon Sep 17 00:00:00 2001 From: Kerim Kabirov Date: Tue, 9 Apr 2024 14:23:23 +0200 Subject: [PATCH] Add wordlist suggestion to README.md Escape Technologies' wordlist is much more relevant than general top 10k English words, hence adding it to readme might be of great use for common users. --- README.md | 3 ++- 1 file changed, 2 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 25d29a9..272a419 100644 --- a/README.md +++ b/README.md @@ -48,8 +48,9 @@ docker run --rm nikitastupin/clairvoyance --help ### Which wordlist should I use? -There are at least two approaches: +There are at least three approaches: +- Use one of the [wordlists](https://github.com/Escape-Technologies/graphql-wordlist) collected by Escape Technologies - Use general English words (e.g. [google-10000-english](https://github.com/first20hours/google-10000-english)). - Create target specific wordlist by extracting all valid GraphQL names from application HTTP traffic, from mobile application static files, etc. Regex for GraphQL name is [`[_A-Za-z][_0-9A-Za-z]*`](http://spec.graphql.org/June2018/#sec-Names).