A curated list of wordlists for discovery, enumeration, fuzzing, and exploitation.
☆110Jun 4, 2026Updated last month
Alternatives and similar repositories for wordlists
Users that are interested in wordlists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A (remote) control center for pwnagotchi... (think: locally: Flashing a pwnagotchi zip or image to an sd or mmc and add custom config.tom…☆12Jun 17, 2023Updated 3 years ago
- Presentations and handouts☆45Jun 27, 2026Updated last week
- Penstaller: A Python tool to automate the installation of essential bug bounty and pentesting tools. With one command, it sets up tools f…☆18Mar 14, 2025Updated last year
- Scan for evidence of CVE-2021-30860 (FORCEDENTRY) exploit☆11Sep 21, 2021Updated 4 years ago
- This repo contains different variants of Bug Bounty & Security & Pentest & Tech related Articles☆59Jan 7, 2025Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- A docker container for running the hashcat brain server☆25May 14, 2019Updated 7 years ago
- Load your data into burp☆11Apr 26, 2023Updated 3 years ago
- ☆11Dec 8, 2023Updated 2 years ago
- Watch live SMTP traffic in a web interface.☆18Updated this week
- NetGun is a free and open source tool for Vulnerability Assessment, port scanning, services enumeration, misconfigurations testing and CV…☆12Jul 25, 2024Updated last year
- Slides from various conferences and talks I've given☆15Oct 12, 2025Updated 8 months ago
- This script is written in Solidity and Python3, it allows you to sell Honeypot tokens despite broken TransferFrom function.☆12Jan 28, 2022Updated 4 years ago
- Image recon is a tool used to find the social media accounts associated with the uploading image.☆21Dec 18, 2020Updated 5 years ago
- "ACCESS LIST" Bypass collections used during pentesting, gathered in one place. The list types include tools, usernames, passwords, comb…☆43Feb 19, 2026Updated 4 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Python library for the https://mega.nz/ API.☆11Feb 13, 2024Updated 2 years ago
- A command-line tool written in Python 3 to download files from VirusTotal☆16Sep 25, 2019Updated 6 years ago
- YesMan☆20Nov 8, 2023Updated 2 years ago
- ETH sweeper☆13Feb 3, 2026Updated 5 months ago
- My Powershell notes☆16Sep 27, 2022Updated 3 years ago
- A tool which allows HackerOne researchers to download their reports into a local, indexed, and searchable repository☆19Sep 29, 2022Updated 3 years ago
- Specialized client for Airframes.io that serves as a proxy for acarsdec, vdlm2dec, dumpvdl2, etc.☆16Jul 5, 2023Updated 3 years ago
- ☆13Nov 29, 2024Updated last year
- A curated list of bugbounty writeups (Bug type wise) , inspired from https://github.com/ngalongc/bug-bounty-reference☆21Apr 14, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Just a better dirbuster☆12Dec 8, 2022Updated 3 years ago
- Command-line interface for any Model Context Protocol (MCP) server.☆45Oct 1, 2025Updated 9 months ago
- Android app that is built by ChatGPT from OpenAI☆16Dec 28, 2022Updated 3 years ago
- ☆24Nov 11, 2022Updated 3 years ago
- User-agent Fuzzing Library. This repository holds data of all the user agents in the `user_agents.json` file, which can be used directly …☆17Apr 14, 2026Updated 2 months ago
- A tiny tool to identify and remediate common misconfigurations in Active Directory Certificate Services☆26May 28, 2025Updated last year
- Much simpler client for Stable Diffusion WebUI☆15Feb 10, 2025Updated last year
- A fork (and mirror) of the Buffer Overflow Module created by NSF Award No. 0113627☆11Feb 11, 2017Updated 9 years ago
- 🔎 Hunt down social media accounts by username across social networks☆18May 26, 2026Updated last month
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- Lightdash文件读取漏洞（CVE-2023-35844）☆20Jun 26, 2023Updated 3 years ago
- 137+ TryHackMe walkthroughs covering web exploitation, privilege escalation, CVE analysis, container escapes, and AI/LLM security. Beginn…☆70Jun 6, 2026Updated 3 weeks ago
- Dominate the Active Directory game. An Active Directory environments pentest tool complementary to existing ones like NetExec.☆20Jun 16, 2026Updated 2 weeks ago
- GenZ Shellcode Generator to execute commands with winExec API☆22Apr 27, 2025Updated last year
- Scripts for pushing models to huggingface repos☆15Jun 26, 2026Updated last week
- Probe_Spider is a Open Source Intelligence Tool made complete out of Python.☆26Apr 28, 2020Updated 6 years ago
- ☆13May 9, 2023Updated 3 years ago