A curated list of wordlists for bruteforcing and fuzzing.
- Lists of Lists
- Enumeration
- Emails
- Passwords
- Usernames
- Vulnerabilities
- Portuguese wordlists
- Other non-English wordlists
- Miscellaneous
- Contributing
- Contributors
- SecLists - Collection of useful wordlists grouped by context.
- Xajkep's Wordlists - Wordlists curated by Xajkep grouped by context.
- Bug-Bounty-Wordlists - A repository that includes all the important wordlists used while bug hunting.
- Awesome lists about all kinds of interesting topics - A repository that includes lists about all kinds of interesting topics in technology.
- Dirbuster Wordlists - Dirbuster's default directories wordlists.
- Dirb Wordlists - Dirb's default wordlists.
- ws-dirs - wfuzz webservices directories' wordlist.
- ws-files - wfuzz webservices files' wordlist.
- Directories - xajkep's directories wordlist.
- Backup files - xajkep's backup files wordlist.
- Backup files with path - xajkep's backup files with paths.
- n0kovo_subdomains - An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.
- Xajkep's email providers - Email providers from xajkep's repository.
- RockYou - The go-to wordlist for passwords.
- WPA-Length Passwords - Passwords with WPA length.
- SecLists' Passwords - Password wordlists from SecLists.
- CrackStation - CrackStation's password wordlist.
- Active-Directory-Wordlists' Passwords - Most common Active-Directory passwords.
- Weakpass - Collection of more than 1500 password wordlists with torrent links for faster downloads.
- SecLists' Usernames - Username wordlists from SecLists.
- Active-Directory-Wordlists' Users - Most common Active-Directory usernames.
- fbnames - Names of Facebook users from 2010.
- NoSQL-Injection Wordlist - List of payloads to test NoSQL Injections.
- Dadoware - Regular Portuguese words.
- words-pt - Regular Portuguese words.
- br-wordlist - Brazilian password wordlist.
- BRDumps - Localized tools and wordlists for Brazilian Portuguese passwords.
- French wordlists
- danish-wordlists - Collection of Danish base wordlists.
- albanian-wordlist - Albanian wordlist - A mix of names, last names, and some Albanian literature.
- medical-wordlist - Medical wordlists in English, French, and Ukrainian languages, which can be used for spell checking.
- Probable-Wordlists - Research on several types of wordlists.
- Kali Wordlists - Kali Linux's default wordlists.
- Blog g0tmi1k - G0tmi1k's post on what makes a good dictionary.
- Skull Security Passwords - Skull Security's password lists.
- Trickest Wordlists - Real-world infosec wordlists, updated regularly.
- Assetnote Wordlists - Automated & manual wordlists provided by Assetnote.
I want contributing to this awesome list to be as simple as possible. Just:
- Fork the repository.
- Add your changes to the list.
- Add yourself to
CONTRIBUTORS.md. - Submit a PR.
Thank you for contributing!
Thank you so much to everyone who helped make this list better!