README.md

Awesome Wordlists

A curated list of wordlists for bruteforcing and fuzzing.

Contents

• Lists of Lists
• Enumeration
• Emails
• Passwords
• Usernames
• Vulnerabilities
• Portuguese wordlists
• Other non-English wordlists
• Miscellaneous
• Contributing
• Contributors

Lists of Lists

• SecLists - Collection of useful wordlists grouped by context.
• Xajkep's Wordlists - Wordlists curated by Xajkep grouped by context.
• Bug-Bounty-Wordlists - A repository that includes all the important wordlists used while bug hunting.
• Awesome lists about all kinds of interesting topics - A repository that includes lists about all kinds of interesting topics in technology.
• OneListForAll - Massive consolidated wordlist for multiple offensive security use cases.

Enumeration

• Dirbuster Wordlists - Dirbuster's default directories wordlists.
• Dirb Wordlists - Dirb's default wordlists.
• ws-dirs - wfuzz webservices directories' wordlist.
• ws-files - wfuzz webservices files' wordlist.
• Directories - xajkep's directories wordlist.
• Backup files - xajkep's backup files wordlist.
• Backup files with path - xajkep's backup files with paths.
• n0kovo_subdomains - An extremely effective subdomain wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.
• api_wordlist - API endpoints and routes wordlist for API discovery.
• AWS S3 Bucket Wordlist - Wordlist for discovering AWS S3 bucket names.

Emails

• Xajkep's email providers - Email providers from xajkep's repository.

Passwords

• RockYou - The go-to wordlist for passwords.
• WPA-Length Passwords - Passwords with WPA length.
• SecLists' Passwords - Password wordlists from SecLists.
• CrackStation - CrackStation's password wordlist.
• Active-Directory-Wordlists' Passwords - Most common Active-Directory passwords.
• Weakpass - Collection of more than 1500 password wordlists with torrent links for faster downloads.
• vie_wpa2_pw - Regional (Vietnam) WPA2 wordlists & hashcat rules.

Usernames

• SecLists' Usernames - Username wordlists from SecLists.
• Active-Directory-Wordlists' Users - Most common Active-Directory usernames.
• fbnames - Names of Facebook users from 2010.

Vulnerabilities

• NoSQL-Injection Wordlist - List of payloads to test NoSQL Injections.
• FuzzDB - Large collection of attack patterns, predictable resources, and fuzzing payloads.
• PayloadsAllTheThings - Extensive payload collection for testing many vulnerability classes.

Portuguese wordlists

• Dadoware - Regular Portuguese words.
• words-pt - Regular Portuguese words.
• br-wordlist - Brazilian password wordlist.
• BRDumps - Localized tools and wordlists for Brazilian Portuguese passwords.

Other non-English wordlists

• French wordlists - Collection of French wordlists.
• danish-wordlists - Collection of Danish base wordlists.
• albanian-wordlist - Albanian wordlist - A mix of names, last names, and some Albanian literature.
• medical-wordlist - Medical wordlists in English, French, and Ukrainian languages, which can be used for spell checking.

Miscellaneous

• Probable-Wordlists - Research on several types of wordlists.
• Kali Wordlists - Kali Linux's default wordlists.
• Blog g0tmi1k - G0tmi1k's post on what makes a good dictionary.
• Skull Security Passwords - Skull Security's password lists.
• Trickest Wordlists - Real-world infosec wordlists, updated regularly.
• Assetnote Wordlists - Automated & manual wordlists provided by Assetnote.

Contributing

I want contributing to this awesome list to be as simple as possible. Just:

1. Fork the repository
2. Add your changes to the list
3. Add yourself to CONTRIBUTORS.md (only if you want to :)
4. Submit a PR

Thank you for contributing!