SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and m
Go to file
2013-03-15 17:37:30 -07:00
Discovery Adding SVN Digger Lists 2013-03-12 13:03:23 -07:00
Fuzzing updated LFI list and added laudanum shells 2013-03-15 15:44:46 -07:00
GrepStrings Many additions to the repository... 2012-08-26 20:04:09 -07:00
Misc Many additions to the repository... 2012-08-26 20:04:09 -07:00
Passwords Many additions to the repository... 2012-08-26 20:04:09 -07:00
Scripts/Backdoors/Web Backdoors updated LFI list and added laudanum shells 2013-03-15 15:44:46 -07:00
URLs Removed some cruft from the list. 2013-02-25 11:42:36 -08:00
Usernames Added URLs directory and READMEs. 2012-02-23 05:55:35 -08:00
.gitignore Quick maintenance. 2012-02-23 06:01:44 -08:00
README added email 2013-03-15 17:37:30 -07:00

SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.

If you have any ideas for things we should include, please send them to daniel@danielmiessler.com or jhaddix@securityaegis.com. Also note that any lists that have been meticulously assembled by someone else will only be used with permission of the creator.

This project is maintained by Daniel Miessler and Jason Haddix. 

Credits:

- Ron Bowes of SkullSecurity for collaborating and including all his lists here
- Clarkson University for their research that led to the Clarkson list
- All the authors listed in the XSS with context doc, which was found on pastebin and added to by us
- Ferruh Mavitina for the begginings of the LFI Fuzz list
- Adam Muntner and  for the FuzzDB content, including all authors from the FuzzDB project
- Kevin Johnson for laudnaum shells

::