# SecLists

> Security tester's collection of wordlists, payloads, and dictionaries

SecLists is a comprehensive collection of lists used during security assessments and penetration tests. It provides usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, and web shells for security researchers. It is distributed via Git, zip download, or package managers on security distributions like Kali Linux and BlackArch.

- Source: https://github.com/danielmiessler/SecLists
- Homepage: https://www.owasp.org/index.php/OWASP_Internet_of_Things_Project
- License: MIT
- Built with: PHP 52.0%, Python 16.4%, Classic ASP 11.5%, Shell 7.4%, Other 12.7%
- Stars: 74452
- Forks: 25180
- Contributors: 328
- Last commit: 2026-10-30
- Latest release: 2026.2 (2026-10-27)
- Purpose: Developer tools, Security & identity
- Type: CLI
- For: Personal, Enterprise

## Worth score: 81/100

How much DigGitHub recommends it, from activity, adoption, docs, license and security signals.

- Popularity: 24/25
- Momentum: 10/20
- Maintenance: 25/25
- Community: 14/15
- Readiness: 8/15

## Downloads

Latest release: [2026.2](https://github.com/danielmiessler/SecLists/releases/tag/2026.2). Files from the project's GitHub release, not checked by DigGitHub.

Source code only: this release has no files to download.

## In collections

- [Learn ethical hacking: practice apps and tools](https://diggithub.com/collections/learn-ethical-hacking)

---

Source page: https://diggithub.com/danielmiessler/SecLists
Updated: 2026-10-31