gobuster VS SecLists

GoBuster = https://github.com/OJ/gobuster

feroxbuster to do some web app browsing (you have also gobuster)

gobuster is an effective way to enumerate subdomains and their directories quickly.

https://github.com/OJ/gobuster

Gobuster is a tool used to brute-force:

https://github.com/OJ/gobuster

Which are the features to consider when selecting the one to use?

gobuster dns --domain example.com -w subdomains-top1million-110000.txt

Maybe swagger.txt

Typical of the sorts of information a tester/attacker might be using from: Daniel Miessler's SecLists

Oh, and then you have this.

You can now also enable a rule for password dictionary. Appwrite knows what are the most common passwords, and with this rule enabled, it will not allow you users to set any of those passwords. It prevents your users from having passwords like password, 123456678, or qwertyui. Appwrite currently knows the 10,000 most commonly used passwords thanks to the same list used by other industry-leading auth providers. You can check out the dictionary list on GitHub.

You could even take a list of the 100,000 most common passwords, and create a virtually uncrackable passphrase simply by combining 3 words that have been randomly selected from that list.

Pro tip: just compound like 30 ashley madison leaked passwords for a super password.

If you need larger password lists ---> https://github.com/danielmiessler/SecLists

Then add in a few default lists from SecLists Passwords dir and Usernames dir

Just out of curiosity... Isn't the directory titled "/seclists/", within the directory /use/share/wordlists/ the same as what's at danielmiessler / SecLists?