GitHub
github.com › danielmiessler › SecLists › tree › master › Discovery › Web-Content
SecLists/Discovery/Web-Content at master · danielmiessler/SecLists
It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
GitHub
github.com › danielmiessler › SecLists › blob › master › Discovery › Web-Content › common.txt
SecLists/Discovery/Web-Content/common.txt at master · danielmiessler/SecLists
It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Seclists
seclists.dev
SecLists - The Security Tester's Companion
# Use with Gobuster for directory brute forcing gobuster dir -u https://example.com -w /path/to/SecLists/Discovery/Web-Content/directory-list-2.3-medium.txt # Use with Hydra for password attacks hydra -l admin -P /path/to/SecLists/Passwords/Common-Credentials/10-million-password-list-top-1000.txt ...
Kali Linux
kali.org › tools › seclists
seclists | Kali Linux Tools
March 2, 2026 - SecLists Usage Examples root@kali:~# ... root@kali:~# tree -d /usr/share/seclists/ /usr/share/seclists/ ├── Discovery │ ├── DNS │ ├── Infrastructure │ ├── SNMP │ └── Web-Content │ ├── CMS │ ├── SVNDigger │ │ ├── ...
GitHub
github.com › danielmiessler › SecLists › blob › master › Discovery › Web-Content › README.md
SecLists/Discovery/Web-Content/README.md at master · danielmiessler/SecLists
It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Selfmade
git.selfmade.ninja › zer0sec › SecLists › - › tree › eee1651de7906112719066540ca2c5bf688cf9f2 › Discovery › Web-Content
Discovery/Web-Content
Selfmade Ninja Academy is a virtual academy where people learn to code, hack, build and break state-of-the-art technologies
GitHub
raw.githubusercontent.com › danielmiessler › SecLists › master › Discovery › Web-Content › common.txt
.bash_history .bashrc .cache .config .cvs .cvsignore .env .forward .git
cms cmsadmin cn cnf cnstats cnt co cocoon code codec codecs codepages codes coffee cognos coke coldfusion collapse collection college columnists columns com com1 com2 com3 com4 com_sun_web_ui comics comm command comment comment-page comment-page-1 commentary commented comments commerce commercial common commoncontrols commun communication communications communicator communities community comp compact companies company compare compare_product comparison comparison_list compat compiled complaint complaints compliance component components compose composer compress compressed computer computers co
Sirensecurity
sirensecurity.io › blog › seclists
Seclists. – Siren Security
April 24, 2021 - https://raw.githubusercontent.com/danielmiessler/SecLists/master/Discovery/Web-Content/raft-medium-directories.txt
SEC-IT Blog
blog.sec-it.fr › en › 2021 › 03 › 02 › web-wordlists
Web wordlists in 2021 | SEC-IT Blog
April 2, 2021 - SecLists is the security tester's companion. [...] The goal is to enable a security tester to pull this repository onto a new testing box and have access to every type of list that may be needed.
SourceForge
sourceforge.net › projects › seclists.mirror
SecLists download | SourceForge.net
March 23, 2026 - SecLists helps to increase efficiency and productivity in security testing by conveniently providing all the lists a security tester may need in one repository. List types include those for usernames, passwords, URLs, fuzzing payloads, sensitive ...
HackerDNA
hackerdna.com › blog › penetration testing › seclists: how to pick the right wordlist (2026 guide)
SecLists: How to Pick the Right Wordlist (2026 Guide) | HackerDNA
1 month ago - On Kali, install it with sudo apt install seclists and it lands in /usr/share/seclists. Start with Discovery/Web-Content/common.txt (4,751 entries) for web paths, Discovery/DNS/subdomains-top1million-5000.txt for subdomains, and Usernames/top-usernames-shortlist.txt with Passwords/Common-Credentials/top-passwords-shortlist.txt for login spraying.
Varutra
varutra.com › home › using seclists for penetration testing
Using SecLists for Penetration Testing | Varutra Consulting
December 2, 2022 - Seclists is something that comes very handy to a pen tester. The simple reason is, it has a collection of all the wordlist lists that is related to different technologies, web servers, and web shells that can be helpful while performing penetration testing on any particular target.