You don't always need to download a pre-made list (which may be outdated or backdoored). Here’s how security professionals build their own: