SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 139 · Most stars
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Self-Hosting Guide. Learn all about locally hosting (on premises & private web servers) and managing software applications by yourself or your organization. Including Cloud, LLMs, WireGuard, Automation, Home Assistant, and Networking.
🔒 A compiled checklist of 300+ tips for protecting digital security and privacy in 2026
- privacy
- security
- censorship
- cybersecurity
Security Guide for Developers
Awesome Privacy - A curated list of services and alternatives that respect your privacy because PRIVACY MATTERS.
A curated list of awesome Hacking tutorials, tools and resources
Downloads videos and playlists from YouTube
🍃 Organic Maps is a free Android & iOS offline maps app for more than 6M travelers, tourists, hikers, and cyclists. It uses crowd-sourced OpenStreetMap data and is developed with love by the community. No ads, no tracking, no data collection, no crapware. Please donate to support the development!
Open-source IDS/IPS, WAF and bot detection for Linux, Windows, Docker and Kubernetes, with a crowdsourced blocklist of malicious IPs.
A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.
Web path scanner
⚙️ A curated list of static analysis (SAST) tools and linters for all programming languages, config files, build tools, and more. The focus is on tools which improve code quality.
- static-analysis
- static-analyzers
- linter
- code-quality
Defund the Police.
🐶 A curated list of Web Security materials and resources.
GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.
A curated list of Site Reliability and Production Engineering resources.
- site-reliability-engineering
- production
- availability
- monitoring
The OWASP Mobile Application Security Testing Guide (MASTG) is a comprehensive manual for mobile app security testing and reverse engineering. It describes technical processes for verifying the OWASP Mobile Security Weakness Enumeration (MASWE) weaknesses, which are in alignment with the OWASP MASVS.
Community curated list of templates for the nuclei engine to find security vulnerabilities.
- nuclei-templates
- nuclei
- bugbounty
- security
A list of resources for those interested in getting started in bug bounties
- bug-bounty-hunters
- hackers
- xss
- bug-bounty
🎬 A curated list of movies every hacker & cyberpunk must watch.
- hacking
- movies
- curated-list
- collection
A curated list of CTF frameworks, libraries, resources and softwares
A curated list of awesome search engines useful during Penetration testing, Vulnerability assessments, Red/Blue Team operations, Bug Bounty and more
This guide details creating a secure Linux production system. OpenSCAP (C2S/CIS, STIG).