
SecLists
danielmiessler/SecListsSecurity tester's collection of wordlists, payloads, and dictionaries
PersonalEnterpriseDeveloper toolsSecurity & identityCLIPermissiveAt a glance
- stars on GitHub
- 74k
- contributors
- 328+
- last commit
- latest release, 5 days ago
- 2026.2
- license
- MIT
About
SecLists is a comprehensive collection of lists used during security assessments and penetration tests. It provides usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, and web shells for security researchers. It is distributed via Git, zip download, or package managers on security distributions like Kali Linux and BlackArch.
From the repository: “SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.”
Downloads
All releases on GitHub ↗Latest release: 2026.2,
Source code only: this release has no files to download.
