[SecLists] Collection of multiple types of lists used during security assessments

SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
The goal is to enable a security tester to pull this repo onto a new testing box and have access to every type of list that may be needed.

If you have any ideas for things we should include, please send them to daniel.miessler@owasp.org or jason.haddix@owasp.org. Also note that any lists that have been meticulously assembled by someone else will only be used with permission of the creator.
This project is maintained by Daniel Miessler and Jason Haddix. 
– Ron Bowes of SkullSecurity for collaborating and including all his lists here
– Clarkson University for their research that led to the Clarkson list
– All the authors listed in the XSS with context doc, which was found on pastebin and added to by us
– Ferruh Mavitina for the begginings of the LFI Fuzz list
– Adam Muntner and  for the FuzzDB content, including all authors from the FuzzDB project
– Kevin Johnson for laudnaum shells
– RSnake for fierce hostname list 

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s