Haklistgen – Turns Any Junk Text Into A Usable Wordlist For Brute-Forcing

Haklistgen is an automated tool that aims to create a powerful custom wordlist for brute-forcing. All the words in this wordlist are turned into junk text into a usable wordlist. Haklistgen tool is developed in the Golang language and it’s faster to use. It supports integrating with other tools like httpx, subfinder, anew, etc. Haklistgen tool is available on the GitHub platform and it’s free, open-source to use. We can collect the junk words from subdomains, pages, etc.

Note: As Haklistgen is a Golang language-based tool, so you need to have a Golang environment on your system. So check this link to download Golang in your system. – How to Install Go Programming Language in Linux

Installation of Haklistgen Tool in Kali Linux OS

Step 1: Use the following command to install the tool in your Kali Linux operating system.

git clone https://github.com/hakluke/haklistgen.git

Step 2: Now use the following command to move into the directory of the tool. You have to move in the directory in order to run the tool.

cd haklistgen

Step 3: Build the go file by using the following command

go build

Working with Haklistgen Tool in Kali Linux OS

Example 1: Scrape all words out of an HTTP response to build a directory Bruteforce wordlist

curl https://geeksforgeeks.org | ./haklistgen

Example 2: Pipe a list of subdomains to it to generate a wordlist for brute-forcing more subdomains

subfinder -silent -d geeksforgeeks.org | ./haklistgen

Example 3: Piping in a custom JavaScript file could yield some interesting results

curl https://example.com/app.js | ./haklistgen