OneListForAll is a wordlist aggregation and curation tool for web fuzzing and penetration testing.
The tool solves the problem of managing fragmented wordlist sources by automating the collection, classification, and deduplication of wordlists from multiple repositories. It works through a five-stage pipeline: syncing approximately 36 external wordlist repositories, automatically classifying entries into categories using path structure and content analysis, building per-category short and long wordlists with filtering, assembling combined final lists, and packaging outputs with checksums. The classification system uses a taxonomy of categories with aliases to organize entries, and filtering rules remove unwanted patterns like URLs and overly long lines while preserving quality entries.
The tool suits security professionals and bug bounty hunters who need comprehensive, well-organized wordlists without manually curating sources. It produces multiple output formats: a curated micro list maintained by hand, per-category short lists from high-priority sources for quality-focused fuzzing, per-category long lists from all sources for exhaustive testing, and combined final lists with or without the largest files. The project acknowledges that six large category wordlists exceed GitHub's file size limits and must be generated locally, requiring approximately fifteen gigabytes of disk space for a full pipeline run. Users can customize the tool by editing configuration files to add new source repositories, adjust filtering rules, and modify category taxonomy.
The project maintains an active pipeline that regularly syncs external sources and rebuilds wordlists, with configuration-driven automation allowing contributors to add sources and adjust classification rules without code changes. Development activity shows ongoing refinement of the classification system and filtering logic to improve wordlist quality and organization.
