SecLists

Description

SecLists is the security tester's companion — a curated collection of wordlists for usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and more. It is the most comprehensive collection of security testing lists used by penetration testers and bug bounty hunters worldwide.

Use Cases

• Supply wordlists for directory brute-forcing and fuzzing tools
• Perform password spraying with curated credential lists
• Use payload lists for XSS, SQLi, and other injection testing

Attack Phases

MITRE ATT&CK Techniques (2)