Topics / #wordlist

Wordlist projects on GitHub

Wordlists of paths, passwords, or subdomains used in security scanning tools

As of , the most-starred Wordlist projects on GitHub are SecLists (74.2K stars), hacker-roadmap (15.7K stars) and dirsearch (15K stars). GitHub.Locker tracks 5 Wordlist repositories with 128.2K stars combined. The fastest-growing on October 16 was SecLists, with +18 stars in a day.

5Projects
128.2KStars in total
+34Stars in a day
Browse in the catalog →github.com/topics/wordlist ↗

Hot right now

Most stars gained in a day · Oct 16

+18

SecLists

danielmiessler/SecLists · ★ 74.2K

SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

+8

dirsearch

maurosoria/dirsearch · ★ 15K

Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

+3

hacker-roadmap

sundowndev/hacker-roadmap · ★ 15.7K

This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

+3

Sublist3r

aboul3la/Sublist3r · ★ 11.1K

Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

The all-time top

5 projects · by stars

  1. #1 · danielmiessler/SecLists

    SecLists

    SecLists is a huge collection of ready-made wordlists for security testing: usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells and more, all gathered in one repository.

    74.2K
  2. #2 · sundowndev/hacker-roadmap

    hacker-roadmap

    This is a curated roadmap and toolkit index for learning and practicing ethical hacking: it explains what penetration testing is and groups hundreds of security tools, wordlists and references by category (recon, password attacks, wireless, exploitation, web hacking, post-exploitation, frameworks).

    15.7K
  3. #3 · maurosoria/dirsearch

    dirsearch

    Dirsearch is an advanced command-line web path brute-forcer used to discover hidden files and directories on websites for security testing.

    15K
  1. 4

    english-words

    12.3Kdwyl/english-words · Python

    A text file of English words — over 466k per the README, 479k in the repo description — published for dictionary and word-based projects such as auto-complete and autosuggestion.

  2. 5

    Sublist3r

    11.1Kaboul3la/Sublist3r · Python

    Sublist3r is a Python tool that enumerates subdomains of a target website using OSINT, helping penetration testers and bug hunters gather subdomains for a domain they are targeting.

Often tagged together