danielmiessler/SecLists

Features

• Vulnerability Assessment and Testing - Provides a centralized library of security assessment data for auditing software, firmware, and hardware.
• Security Wordlists - Provides a comprehensive collection of usernames, passwords, and sensitive data patterns for security assessment.
• Awesome List - A community-curated directory that catalogs and links out to other open-source projects, rather than a standalone tool you run yourself.
• Web Application Security - Provides payloads and testing resources for discovering vulnerabilities in web applications.
• Security Testing Methodologies - Provides a structured, community-vetted framework for performing comprehensive security audits.
• IoT Security Testing Guides - Provides a structured collection of methodologies and guides for testing internet-connected hardware.
• Credential Brute-Forcing - Provides large collections of common credentials for testing system resilience against brute-force attacks.
• Injection Payloads - Provides extensive collections of injection payloads for testing application resilience against unexpected data.
• Fuzzing and Wordlists - Extensive collection of wordlists for HTTP methods and API endpoints.
• Hacker Documentaries - Essential collection of lists for security testing and assessment.
• Security Collections - Collection of wordlists for security assessment and testing.
• Wordlists and Payloads - Comprehensive collection of lists for security assessments.
• Security Curated Lists - Collection of wordlists for security assessments and fuzzing.
• Attack Payloads and Wordlists - Collection of lists for usernames, passwords, and fuzzing payloads.
• Fuzzing Wordlists - Comprehensive collection of lists for security testing and fuzzing.
• Penetration Testing - Collection of lists used during security assessments and testing.
• Security And Privacy - Collection of wordlists for security testing and auditing.
• Security Resources - Listed in the “Security Resources” section of the Awesome Hacking awesome list.
• Threat Intelligence and OSINT - Comprehensive collection of lists for security assessments.
• Vulnerability Research - Aggregates lists for security assessments and fuzzing.
• Vulnerability Scanning - Provides pre-defined lists of attack patterns for systematic vulnerability scanning of applications and services.
• Vulnerability Wordlists - Comprehensive collection of lists for security testing and fuzzing.
• Web Security Testing - Comprehensive collection of wordlists for brute-forcing applications.
• Wordlists - Collection of lists used during security assessments.
• Fuzzing Resources - Provides a standardized library of input patterns and payloads for testing application resilience.
• IoT Security Hardening - Provides methodologies and testing resources for hardening internet-connected hardware against insecure configurations.
• Firmware Analysis Guides - Offers comprehensive guides for the complete lifecycle of device firmware analysis and exploitation.
• Security Assessments - Provides methodologies for evaluating security risks and insecure configurations in connected hardware.
• Firmware Security Methodologies - Provides structured methodologies for auditing and testing the security of embedded device firmware.
• Static Asset Decoupling - Separates raw testing data from execution logic to ensure compatibility with diverse security tools.
• Flat-File Storage - Organizes security assets into a portable, hierarchical directory structure of plain text files.
• Standardized Directory Taxonomies - Maintains a consistent folder hierarchy to allow automated tools to predictably ingest testing resources.

Star history