OWASP SecLists Project

• Main
• OWASP SecLists
• Project About

About SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. The goal is to enable a security tester to pull this repo onto a new testing box and have access to every type of list that may be needed. SecLists GitHub Repository Licensing This project is licensed under the MIT license. Quick Download Download SecLists Change Log SecLists (Releases) SecLists (Commits) Code Repo SecLists Email List/Feedback/Log issues Questions? Problem? Please ask on the GitHub Issue page Feature Requests/Development Have an idea of something to include? Please create a new requests (as enhancement) here: https://github.com/danielmiessler/SecLists/issues ...Better yet, open up a new pull request here: https://github.com/danielmiessler/SecLists/pulls (Note: We highly encourage you to include the source) Project Leaders Daniel Miessler (@DanielMiessler) and Jason Haddix (@Jhaddix) PROJECT INFO What does this OWASP project offer you? RELEASE(S) INFO What releases are available for this project? what is this project? Name: OWASP SecLists Project (home page) Purpose: SecLists is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more. The goal is to enable a security tester to pull this repo onto a new testing box and have access to every type of list that may be needed. License: Creative Commons Attribution ShareAlike 3.0 License (best for documentation projects) who is working on this project? Project Leader(s): Daniel Miessler @ Jason Haddix @ how can you learn more? Project Pamphlet: Not Yet Created Project Presentation: Mailing list: Mailing List Archives Project Roadmap: View Key Contacts Contact Daniel Miessler @ to contribute to this project Contact Daniel Miessler @ to review or sponsor this project current release Not Yet Published last reviewed release Not Yet Reviewed other releases

Navigation menu

Personal tools

• Log in
• Request account

Namespaces

• Page
• Discussion

Variants

Views

• Read
• View source
• View history

More

Search

Navigation

• Home
• About OWASP
• Acknowledgements
• Advertising
• Books
• Brand Resources
• Careers
• Chapters
• Downloads
• Events
• Funding
• Governance
• Initiatives
• Mailing Lists
• Merchandise
• Presentations
• Press
• Projects
• Supporting Partners
• Video

Reference

• Activities
• Attacks
• Code Snippets
• Controls
• Glossary
• How To...
• Java Project
• .NET Project
• Principles
• Technologies
• Threat Agents
• Vulnerabilities

Tools

• What links here
• Related changes
• Special pages
• Printable version
• Permanent link
• Page information

• Content is available under Creative Commons Attribution-ShareAlike unless otherwise noted.

• Privacy policy
• About OWASP
• Disclaimers

• Open Web Application Security Project, OWASP, Global AppSec, AppSec Days, AppSec California, SnowFROC, LASCON, and the OWASP logo are trademarks of the OWASP Foundation.