SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
☆102Aug 30, 2026Updated this week
Alternatives and similar repositories for SecLists
Users that are interested in SecLists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Last Web Recon Tool You'll Need☆17Nov 7, 2020Updated 5 years ago
- Phishing Campaign Toolkit☆13Nov 9, 2021Updated 4 years ago
- Directory/file & DNS busting tool written in Go☆15Nov 26, 2019Updated 6 years ago
- Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supp…☆22Jul 13, 2020Updated 6 years ago
- Homemade scripts to-do various vulnerable challenges☆80Jan 7, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Veil-Evasion is a tool used to generate payloads that bypass antivirus solutions☆12Apr 24, 2017Updated 9 years ago
- Clone of Metasploit's wiki w/ additions☆17Nov 22, 2015Updated 10 years ago
- go-audit is an alternative to the auditd daemon that ships with many distros☆16Oct 28, 2018Updated 7 years ago
- A collection of machine learning algorithms in python☆14May 11, 2021Updated 5 years ago
- Regular Expression Pattern Analyzer☆18Aug 9, 2023Updated 3 years ago
- ☆19Dec 8, 2014Updated 11 years ago
- AES-NI bruteforcer for bad Character Sets☆10Jan 17, 2021Updated 5 years ago
- MSFvenom Payload Creator (MSFPC)☆1,331May 9, 2021Updated 5 years ago
- LDAP library for auditing MS AD☆12Nov 28, 2023Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Runs sshd as a unprivileged user for persistence☆10Jun 23, 2019Updated 7 years ago
- Deploy an "illegal" SOC to manage vulnerabilities on your city servers in minutes.☆20Dec 8, 2022Updated 3 years ago
- Docker container for running CobaltStrike 4.7 and above☆26Mar 20, 2025Updated last year
- Miscellaneous tools for BloodHound☆18Jan 26, 2022Updated 4 years ago
- IP TRACKER - Powerful TooL☆11Aug 3, 2021Updated 5 years ago
- Serving files with conditions, serverside keying and more.☆18May 26, 2022Updated 4 years ago
- 📨 Quick tool to finds and extract email addresses from a body of text☆12Apr 15, 2023Updated 3 years ago
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆12Mar 14, 2018Updated 8 years ago
- Connect to Cisco AnyConnect VPN and open a Microsoft Remote Desktop (RDP) window☆12Apr 5, 2026Updated 4 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆12Apr 22, 2018Updated 8 years ago
- ☆13Nov 5, 2017Updated 8 years ago
- Carbon Black Response IR tool☆56Dec 10, 2020Updated 5 years ago
- Sniper. Passive Secrets Hunting.🚬☆14Jun 3, 2022Updated 4 years ago
- Vulnerable LLM Application☆14Aug 9, 2026Updated 3 weeks ago
- Clean accounts over permissions in GCP infra at scale☆72May 9, 2023Updated 3 years ago
- Collection of useful command line commands☆14Dec 10, 2021Updated 4 years ago
- A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228☆12Dec 13, 2021Updated 4 years ago
- Convert Empire profiles to Apache mod_rewrite scripts☆29Sep 17, 2019Updated 6 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Fuzz for hidden proxies, vhosts, and URLs☆15Apr 1, 2026Updated 5 months ago
- A small pentesting lab for Azure☆10Apr 19, 2019Updated 7 years ago
- Quick and dirty reconnaissance hacks for BB and pentesting☆11Feb 20, 2023Updated 3 years ago
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Simulating Industrial IoT with IGSS SCADA and Rasberry Pi, Attacking and fixing potential vulnerabilities☆13Jun 7, 2020Updated 6 years ago
- 各种安全相关思维导图整理收集☆12Feb 13, 2017Updated 9 years ago
- Download Web-10K data by querying Bing Image Search☆10Feb 1, 2022Updated 4 years ago