SecLists
A comprehensive collection of security testing wordlists and payloads for penetration testers and security researchers.
What is SecLists?
SecLists is a curated collection of security testing resources including wordlists, fuzzing payloads, sensitive data patterns, and web shells. It solves the problem of security professionals having to gather testing materials from multiple sources by providing a comprehensive, all-in-one repository that can be quickly deployed on testing systems.
Penetration testers, security researchers, red teamers, and ethical hackers who need ready-to-use wordlists and payloads for security assessments, vulnerability discovery, and exploitation.
Developers choose SecLists because it offers the most comprehensive and well-organized collection of security testing resources in one place, saving significant time in preparing for assessments and ensuring access to proven, effective payloads and patterns.
Overview
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Use Cases
Best For
- Brute-force attacks against login forms and authentication systems
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
