danielmiessler/SecLists

Modularize and change format of quickhits.txt

Open

#1264 opened on Nov 19, 2025

View on GitHub
 (1 comment) (0 reactions) (0 assignees)PHP (70,918 stars) (25,003 forks)batch import
ci/cdenhancementhelp wantedwordlist

Description

Describe the feature request: Similar to how Discovery/Web-Content/combined_words.txt and Discovery/Web-Content/combined_directories are composed of several other wordlists, it would be beneficial to modularize the quickhits.txt wordlist so it can contain automatically-updating components.

Using a different wordlist format should also be considered so that when the wordlist is used, it's easier to trace back which web service the matched URL path corresponds to.

Next steps: Proposals for what that new format should look like are welcome.

Contributor guide

Tech stack
None
Domain
security
Issue type
feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
fresh
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
mostly clear
Prerequisites
Understanding of SecLists structureFamiliarity with wordlist formats
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
45
Research direction
Examine the existing modular wordlists like `Discovery/Web Content/combined words.txt` and `Discovery/Web Content/combined directories.txt` to understand their composition and format. Review the current `quickhits.txt` file to identify its structure. Propose a new format that enables traceability to the original web service, possibly by including metadata or headers. Consider how to break the wordlist into sub components that can be automatically updated. The proposal should be submitted as a comment on the issue, including a sample of the new format and a plan for modularization.