SecLists is the security tester’s companion. It’s a collection of multiple types of lists used during security assessments, collected in one place.

SecLists - Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells  - SecLists Usernames passwords URLs sensitive data patterns fuzzing payloads web shells 640x243 - SecLists – Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells

List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

The goal is to enable a security tester to pull this repository onto a new testing box and have access to every type of list that may be needed.

Contents of SecLists

Each section has tonnes of content including the below:

  • Discovery lists (DNS, SNMP, Web content)
  • Fuzzing Payloads (Databases, LFI, SQLi, XSS)
  • Password lists (Common credentials, cracked hashes, honeypot captures, leaked lists)
  • Data Pattern lists
  • Payload files (Zip bombs, flash, images)
  • Username lists (Honeypot captures)
  • Web shells

Install SecLists

Zip



Git (Small)



Git (Complete)



You can access all the lists here:

https://github.com/danielmiessler/SecLists



Source link

No tags for this post.

LEAVE A REPLY

Please enter your comment!
Please enter your name here