#Wordlist
Showing 60 of 60 repositories tagged #wordlist, ranked by stars
Web path scanner
Common User Passwords Profiler (CUPP)
Rockyou for web fuzzing
Real-world infosec wordlists, updated regularly
Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords
A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.
Generate smart and powerful wordlists
RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!
1337 Wordlists for Bug Bounty Hunting
macOS keychain cracking tool
BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
Find All Parameters - Tool to crawl pages, find potential parameters and generate a custom target parameter wordlist
Second-order subdomain takeover scanner
A Python tool used to automate the execution of the following tools : Nmap , Nikto and Dirsearch but also to automate the report generation during a Web Penetration Testing
macOS FileVault cracking tool
A Framework meant for the exploitation of iOS devices.
Wayback Machine OSINT Framework
My useful files for penetration tests, security assessments, bug bounty and other security related stuff
Faceboom is a brute force application built on python 2.7 later upgraded to 3.6 which enables the tester to enter the victims account by using their API, it uses various libraries like optparse, re and more.
Welcome to the Bug Hunter's Wordlists repository! 🐛🔍 This repository serves as a comprehensive collection of essential wordlists utilized by bug hunters, penetration testers, and security enthusiasts during their reconnaissance and vulnerability assessment processes.
Custom wordlist, updated regularly
A wordlist generator tool, that allows you to supply a set of words, giving you the possibility to craft multiple variations from the given words, creating a unique and ideal wordlist to use regarding a specific target.
Generate wordlists from Github repositories
Wwwordlist is a wordlist generator for pentesters and bug bounty hunters. It extracts words from HTML, URLs, JS/HTTP/input variables, quoted texts in the text and mail files in order to generate wordlists.
Generate customized Password/Passphrase wordlist based on target information
Combine and clean word lists
Wordlist for web fuzzing, made from a variety of reliable sources including: result from my pentests, git.rip, ChatGPT, Lex, nuclei templates, web-scanners, seclist, bo0m, and more.
📚 An ultimate collection wordlists of the best-known CMS
Leak other players' temporary workspaces for ctf and wargames.
This Script will produce all of the WPA2 Passwords used by various Router companies aswell as Fritzbox. All of these Passwords will be 16 Numbers in length. So it could get a bit large.
A very flexible phone number wordlist generator
Chart-Of-Wordlist helps to create your own custom wordlist. Also in one repository, you can find a list of awesome wordlist.
BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p
Extract endpoints marked as disallow in robots files to generate wordlists.
This tool helps to create a unique wordlist which can crack more than 50% of passwords using brute-force attack, so on social media sites such as: Facebook, Instagram, Twitter etc as well
A single script to install important Pentesting Tools and wordlists on Debian based Linux OS.
SSH Private Key Looting Wordlists. A collection of wordlists to aid in locating or brute-forcing SSH private key file names.
Handshake cracker
If these strings are in your code, you might have a problem!
ethereum wallet recovery password multithread tool, baked from pyethrecover and pyethereum, for using keystore v3 json file to help recover your lost password if you know some phrases using both brute and wordlist technique, start + end words, whole ascii or just numbers
W Generator - A powerful frontend tool for penetration testers to generate customized wordlists based on public user information
Promocode wordlist
The following package is the standalone wordlist-only component to flask-unsign.
Advanced Web Directory & File Bruteforcer with Updated Wordlists (May 2026)
Collection of various wordlists
🛡️ Zerdecalistops: The Ultimate Cyber Security Ammo Depot. An advanced, dashboard-powered custom wordlist collection for Penetration Testers and Security Researchers.
create unlimited passwords to brute force any account! This tool is created only for educational purpose.
wordlists for password cracking
Generate customized wordlists for penetration testing practice (e.g. brute force attack, dictionary attack, etc.)
Create wordlists from source codes files/directories for enumeration
Wordpress Plugins List
Wordlists compiled from Bible verses
Common User Passwords Profiler (CUPP) in Rust
Smart Setup Server For BugBounty
Same @Mebus/cupp tool but best speed and Creates every possible word using the information you provide.
Generate wordlists using pattern logic and expressions.
WiFi Dictionary Attack is a compact, Python-based Wi‑Fi security testing script. It scans nearby networks, targets a specified SSID, loads a password wordlist from passwords.txt, attempts WPA/WPA2 connections using pywifi, and reports successes or failures. For authorized, educational security audits only.
Web Application Penetration Testing tools and Materials for Ethical Hackers.
Tool for enumerate subdomains by Brute-force, or by using different options while grabbing results.
Extend wordlist by appending digits and special characters to each word.