A curated collection of high-value WordPress endpoints, files, and directories for security reconnaissance and penetration testing.
Avoids noisy, unnecessary entries to give pentesters exactly what they need.
With Dirsearch (recommended)
dirsearch -u https://example.com -w wp-karrab.txt
With ffuf
ffuf -u https://example.com/FUZZ -w wp-karrab.txt
With Gobuster
gobuster dir -u https://example.com -w wp-karrab.txt
Contributions are welcome — submit issues or pull requests.
This project is licensed under the Apache License, Version 2.0. See the LICENSE file for details.