SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 57 · Most stars
Decrypt and export passwords, cookies, history and more from 20 browsers on Windows, macOS and Linux. For authorized security research, incident response and DFIR.
- chrome
- macos
- windows
- pentest-tool
hydra
- penetration-testing
- password-cracker
- network-security
- hydra
Common User Passwords Profiler (CUPP)
- wordlist-generator
- wordlist
- dictionary-attack
- password
Hide secrets with invisible characters in plain text securely using passwords 🧙🏻♂️⭐
- cryptography
- steganography
- compression
- functional-programming
TranslatedAndee lives on your phone or Mac and uses any app like you do—no integrations, no root, any model; memory and passwords never leave your device
:unlock: :unlock: Find secrets and passwords in container images and file systems :unlock: :unlock:
- scanning-tool
- secret-keys
- secrets-management
- infosectools
🔐 Securely share sensitive information with automatic expiration & deletion after a set number of views or duration. Track who, what and when with full audit logs.
Secure sharing of secrets, passwords and files
- password-share
- encryption-decryption
- file-upload
- onetimelink
Keep passwords and other sensitive information out of your chat logs and inboxes.
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
bcrypt-ruby is a Ruby binding for the OpenBSD bcrypt() password hashing algorithm, allowing you to easily store a secure hash of your users' passwords.
Hashtopolis - distributed password cracking with Hashcat
- cracking
- distributed
- hashcat
- pentesting
One rule to crack all passwords. or atleast we hope so.
Program to reverse Docker images into Dockerfiles
- security-tools
- security
- docker-security
- reverse-engineering
Wordlist, rules and masks from Kaonashi project (RootedCON 2019)
- wordlist
- password
- password-strength
- password-safety
BitCracker is the first open source password cracking tool for memory units encrypted with BitLocker
- bitlocker
- password-cracker
- cuda
- cryptography
An Intelligent wordlist generator based on user profiling, permutations, and statistics. (Named after the same tool in Mr.Robot series S01E01)
- elliot
- cupp
- passwords
- hacking-tool
Fake sshd that logs ip addresses, usernames, and passwords.
Password cracking rules and masks for hashcat that I generated from cracked passwords.
A tiny Elixir library for time-based one time passwords (TOTP)
Java cryptographic library that supports Argon2, bcrypt, scrypt and PBKDF2 aimed to protect passwords in databases. Easy to use by design, highly customizable, secure and portable. All the implementations follow the standards and have been reviewed to perform better in the JVM.
- pbkdf2
- bcrypt
- scrypt
- argon2
Offline, encrypted vault for seed phrases, private keys, passwords and API keys. Also used by agents.
large hashcat rulesets generated from real-world compromised passwords
- hashcat
- hashcat-rules
- password-cracking
- security-research