SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 117 · Most stars
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
Web path scanner
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
Fast subdomains enumeration tool for penetration testers
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
🔍 A collection of interesting, funny, and depressing search queries to plug into shodan.io 👩💻
- shodan
- infosec
- pentesting
- iot
A list of web application security
- penetration-testing
- web-hacking
- vulnerabilities
- scanner
A curated list of resources for learning about application security
- security-experts
- reading-list
- curated
- application-security
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
A collection of awesome security hardening guides, tools and other resources
- awesome-list
- security
- security-hardening
- security-tools
A list of interesting payloads, tips and tricks for bug bounty hunters.
A curated list of fuzzing resources ( Books, courses - free and paid, videos, tools, tutorials and vulnerable applications to practice on ) for learning Fuzzing and initial phases of Exploit Development like root cause analysis.
- awesome-list
- awesome
- fuzzing
- fuzzing-framework
A curated list of awesome infosec courses and training resources.
An authoritative list of awesome devsecops tools with the help from community experiments and contributions.
⭐️ A curated list of awesome forensic analysis tools and resources
- computer-forensics
- digital-forensics
- forensic-analysis
- dfir
✨ A curated list of awesome threat detection and hunting resources 🕵️♂️
🚗 A curated list of resources for learning about vehicle security and car hacking.
- vehicle-security
- car-hacking
- hacking-vehicles
- security
A curated list of awesome YARA rules, tools, and people.
- yara-rules
- yara-signatures
- yara
- malware-rules
A collected list of awesome security talks
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony