SecLists

danielmiessler/SecLists

Security tester's collection of wordlists, payloads, and dictionaries

PersonalEnterpriseDeveloper toolsSecurity & identityCLIPermissive

At a glance

stars on GitHub
74k
contributors
328+
last commit
latest release, 5 days ago
2026.2
license
MIT

About

SecLists is a comprehensive collection of lists used during security assessments and penetration tests. It provides usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, and web shells for security researchers. It is distributed via Git, zip download, or package managers on security distributions like Kali Linux and BlackArch.

From the repository: “SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.”

Latest release: 2026.2,

Source code only: this release has no files to download.

owasp.org
Preview of SecLists
Preview of SecLists at owasp.org

Featured in