danielmiessler/SecLists

danielmiessler/SecLists has 74,649 GitHub stars and 25,193 forks. GitHot measured +26 stars in 24 hours and +152 in 7 days. Last checked 2026-11-09 15:44 UTC. Last push 2026-11-02.

Cómo se miden estas cifras

SecLists es el compañero de los profesionales de las pruebas de seguridad. Reúne en un solo lugar colecciones de distintos tipos de listas utilizadas durante las evaluaciones de seguridad. Incluye listas de nombres de usuario, contraseñas, URL, patrones de datos confidenciales, cargas útiles para fuzzing, web shells y mucho más.

74,649 estrellas 25,193 forks +26 in 24h

Crecimiento de estrellas medido

in 24h: +26
in 7 days: +152
in 15 days: Actualización retrasada
in 1 month: Actualización retrasada

Cambios netos en períodos que se solapan, no totales diarios. Los datos no disponibles se dejan en blanco. Las estrellas indican interés, no calidad.

README.md

Original

Project logo

About SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. The goal is to enable a security tester to pull this repository onto a new testing box and have access to every type of list that may be needed.

This project is maintained by Daniel Miessler, Jason Haddix, Ignacio Portal and g0tmi1k.

Repository details

Repo size

Install

Zip

wget -c https://github.com/danielmiessler/SecLists/archive/master.zip -O SecList.zip && unzip SecList.zip && rm -f SecList.zip

Git: No commit history (faster)

git clone --depth 1 https://github.com/danielmiessler/SecLists.git

Git: Complete

git clone https://github.com/danielmiessler/SecLists.git

Kali Linux (Tool Page)

apt -y install seclists

BlackArch (Tool Page)

sudo pacman -S seclists

Attribution

See CONTRIBUTORS.md

Contributing

See CONTRIBUTING.md

Similar Projects

Assetnote Wordlists: High quality wordlists for content and subdomain discovery which are automatically updated every month.
fuzz.txt: Wordlists of "potentially dangerous" files.
FuzzDB: Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
PayloadsAllTheThings: A list of useful payloads and bypass for Web Application Security and Pentest/CTF
BiblePass: Wordlists compiled from Bible verses
SamLists: Data-driven wordlists containing HTTP parameter names, directory names and filenames.

Wordlist Tools

Cook: A wordlist framework. An overpowered wordlist generator, splitter, merger, finder and saver. Cook facilitates the creation of permutations and combinations with a variety of encodings and many more features.
Wl: CLI utility for converting strings to a given casing style.
CeWL: Custom Word List generator.
Genoveva: From a word list, it generates up to 17,335,754 combinations per word, mixing lowercase, capitalized, uppercase, full and partial L33T (for each vowel and "s"), reverse, numbers from 1 to 4 digits, dates in mmddyyyy format from 1950 to 2030, date format mmddyy, symbols at the end, symbols between name and date...

Also checkout the .bin directory in this repository. We have a number of wordlist generators and mutators there.

💜 Support This Project

We spend hundreds of hours a year on open source. If you'd like to help support this project, you can sponsor us here:
danielmiessler (founder)
ItsIgnacioPortal (current maintainer since 2021)

Licensing

This project is licensed under the MIT license.

^{NOTE: Downloading this repository is likely to cause a false-positive alarm by your anti-virus or anti-malware software, the filepath should be whitelisted. There is nothing in SecLists that can harm your computer as-is, however it's not recommended to store these files on a server or other important system due to the risk of local file include attacks.}