repository·master·Indexed 13 days ago
https://github.com/danielmiessler/seclistsA comprehensive collection of security testing resources, including usernames, passwords, URLs, fuzzing payloads, and web shells. It provides specialized wordlists for LLM safety testing (jailbreak prompts, bias, and privacy), DNS subdomain discovery, web application API fuzzing, and targeting specific environments like Spring Boot, Adobe Experience Manager, and Oracle E-Business Suite v11.
SecLists is a collection of multiple types of lists used during security assessments. It is designed to be pulled onto a testing machine to provide immediate access to various payloads and patterns.
Common list types include:
The Moby Project provides public-domain lexical resources created by Grady Ward. Within the SecLists repository, this directory contains specific subsets of the Moby Project wordlists that are useful for security testing and lexical analysis.
The available sub-directories in this repository include:
Moby Language II: Wordlists covering 5 different languages.Moby Thesaurus II: A large collection containing 30,260 root words and over 2 million synonyms.Moby Words II: A collection of various other useful wordlists.The Passwords directory contains various password lists used for credential guessing against targeted services. This includes popular lists like the RockYou lists (maintained by Rob Bowes) and specialized wordlists.
Key Directory Conventions:
withcount folder: Contains password lists where each entry is accompanied by its occurrence count.This directory contains Danish wordlists authored by @n0kovo. For the most up-to-date versions, larger collections, or detailed information regarding specific lists, you should refer to the original source repository.
https://github.com/n0kovo/danish-wordlistsThe XSS directory contains wordlists designed for testing Cross-Site Scripting (XSS) vulnerabilities. The wordlists are categorized into two types based on the testing method:
When using robot-friendly lists, check the specific README.md file within the target subdirectory, as minor adjustments may be required for certain tools.
URLs directory contains lists of common URLs for specific systems (such as WordPress or Drupal). These lists are designed to be used with an intercepting proxy to populate a site tree, providing whitebox-like knowledge of a target's structure by attempting to access known paths.GrepStrings directory contains curated lists of strings designed to be used as patterns with tools like grep. These lists help identify interesting or sensitive content when scanning filesystems or source code repositories.Usernames directory contains various username lists designed for use with security tools. These lists are intended to be used as input for tools attempting to guess credentials (username/password combinations) against a targeted service.The EFF Dice wordlists are designed to facilitate the generation of secure, memorable passwords based on dice rolls. The lists are categorized by word length and complexity to match different dice-rolling scenarios (e.g., using 4 dice vs. more).
To use these lists, select the file that matches your intended dice-rolling method and password complexity requirements. If you are building a tool that requires only the raw words without the dice-side metadata, use the files suffixed with _words.txt.
### Included files
- `large.txt` - EFF's Large Word List
- `large_words.txt` - EFF's Large Word List, with only the words present (i.e. no side numbers)
- `small_1.txt` - EFF's Small Word List 1, for use with 4 dice and featuring only short words
- `small_1_words.txt` - EFF's Small Word List 1, with only the words present (i.e. no side numbers)
- `small_2.txt` - EFF's Small Word List 2, for use with 4 dice and featuring longer words that may be more memorable
- `small_2_words.txt` - EFF's Small Word List 2, with only the words present (i.e. no side numbers)Pwdb directory contains wordlists sourced from the Pwdb-Public project, organized by language. These lists are designed for credential testing and password auditing against specific linguistic demographics. Available languages include Arabic, Spanish, German, Chinese, French, and Polish.SecLists provides categorized prompt wordlists designed to evaluate the robustness, safety, and ethical boundaries of Large Language Models (LLMs). These categories help developers and security researchers test for:
The Miscellaneous/Words directory provides wordlists in multiple languages. These lists are designed for use in security testing scenarios, specifically for: