SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.
☆102Sep 20, 2026Updated this week
Alternatives and similar repositories for SecLists
Users that are interested in SecLists are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The Last Web Recon Tool You'll Need☆17Nov 7, 2020Updated 5 years ago
- Directory/file & DNS busting tool written in Go☆15Nov 26, 2019Updated 6 years ago
- Crowbar is brute forcing tool that can be used during penetration tests. It is developed to support protocols that are not currently supp…☆22Jul 13, 2020Updated 6 years ago
- Homemade scripts to-do various vulnerable challenges☆80Jan 7, 2021Updated 5 years ago
- Personal fork of Kippo SSH honeypot.☆13May 25, 2014Updated 12 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- Veil-Evasion is a tool used to generate payloads that bypass antivirus solutions☆12Apr 24, 2017Updated 9 years ago
- Inline file transfer using in-built Windows tools (DEBUG.exe or PowerShell).☆319Apr 27, 2020Updated 6 years ago
- Clone of Metasploit's wiki w/ additions☆17Nov 22, 2015Updated 10 years ago
- MSFvenom Payload Creator (MSFPC)☆1,332May 9, 2021Updated 5 years ago
- LDAP library for auditing MS AD☆12Nov 28, 2023Updated 2 years ago
- A modified version of TomNomNom's anew, allowing for multiple files to be defined as parameters.☆13Jun 17, 2023Updated 3 years ago
- IP TRACKER - Powerful TooL☆11Aug 3, 2021Updated 5 years ago
- Serving files with conditions, serverside keying and more.☆18May 26, 2022Updated 4 years ago
- WPA/WPA2 Belkin.XXXX, Belkin_XXXXXX, belkin.xxx and belkin.xxxx router default key generator.☆16May 13, 2015Updated 11 years ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- Egressbuster is a method to check egress filtering and identify if ports are allowed. If they are, you can automatically spawn a shell.☆12Mar 14, 2018Updated 8 years ago
- Connect to Cisco AnyConnect VPN and open a Microsoft Remote Desktop (RDP) window☆12Apr 5, 2026Updated 5 months ago
- Totally Automatic LFI Exploiter (+ Reverse Shell) and Scanner☆12Apr 22, 2018Updated 8 years ago
- Sniper. Passive Secrets Hunting.🚬☆14Jun 3, 2022Updated 4 years ago
- Florida Man 2017☆10Aug 3, 2017Updated 9 years ago
- A fully automated, accurate, and extensive scanner for finding log4j RCE CVE-2021-44228☆12Dec 13, 2021Updated 4 years ago
- Fuzz for hidden proxies, vhosts, and URLs☆15Apr 1, 2026Updated 5 months ago
- A small pentesting lab for Azure☆10Apr 19, 2019Updated 7 years ago
- A security tool for multithreaded information gathering and service enumeration whilst building directory structures to store results, al…☆2,195Dec 11, 2022Updated 3 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- Attempt zone transfers on domains☆19Jul 12, 2021Updated 5 years ago
- Script for Kali that adds a bunch of tools and customizes it to be much better☆190Jan 26, 2021Updated 5 years ago
- Some bash to make life easier after a new kali install..☆34Dec 11, 2022Updated 3 years ago
- ☆17May 15, 2025Updated last year
- E-mails, subdomains and names Harvester - OSINT☆13Feb 26, 2018Updated 8 years ago
- Python3 tool to perform password spraying using RDP☆17Aug 14, 2023Updated 3 years ago
- BLE based C2 for Hak5's Bash Bunny☆20Oct 31, 2023Updated 2 years ago
- Arduino Mega 1280/2560 and PJRC Teensy++2.0 xmem compatible library with auto-size features and real preemptive multitasking. Also provid…☆18Feb 19, 2015Updated 11 years ago
- PoC for the CVE-2021-20837 : RCE in MovableType☆18Oct 26, 2021Updated 4 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- python wrapper to use tshark for file extraction from the command line.☆26Nov 15, 2018Updated 7 years ago
- Wi-Fi Hacking Workshop☆14Dec 27, 2020Updated 5 years ago
- Python script for extracting and decrypting Group Policy Preferences passwords☆26May 28, 2021Updated 5 years ago
- A tool for checking a hash:pass pot file for hashes from a user:hash file☆12Oct 23, 2016Updated 9 years ago
- ☆15Nov 23, 2015Updated 10 years ago
- ☆14Nov 15, 2020Updated 5 years ago
- Web Sight Front-end Community Edition☆24May 25, 2020Updated 6 years ago