SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–11 of 11 · Most stars
Security scanner for AI agent skills. Detect vulnerabilities, malicious patterns, security risks, prompt injection, data exfiltration, and supply-chain risks in Claude Code, Codex, and MCP skills before you install them.
- agent-security
- agent-skills
- agentic-ai
- ai-security
Lightweight static analysis for many languages. Find bug variants with patterns that look like source code.
Reusable, vendor-neutral, industry-specific, vendor-specific solution architecture patterns for enterprise
- solutions-architect
- solutions-engineering
- enterprise-architecture
- enterprise-software
A utility to safely generate malicious network traffic patterns and evaluate controls.
cwe_checker finds vulnerable patterns in binary executables
- cwe
- binary-analysis
- static-analyzer
- vulnerability-scanner
AI-ready reference architecture for Angular / ASP.NET Core projects. A hardened foundation with secure authentication, authorization, role and user management, and consistent patterns designed to be safely extended by AI tools. Stop letting AI hallucinate your auth and DB logic - give it a production-grade foundation to build on.
- template-project
- asp-net-core
- angular
- rapid-development
Audit AI chat exports locally before sharing or migration. Find possible secrets, personal-data patterns, broken JSON/JSONL, SQLite issues, and scan gaps—without uploading the archive.
- chat-archive
- python
- secret-scanning
- sqlite
Win Application Framework (WAF) is a lightweight Framework that helps you to create well structured XAML Applications.
Passive API key and secret discovery browser extension for Chrome and Firefox. 80+ detection patterns, zero config.
- pentesting
- security
- chrome-extension
- api-keys
GoDoc Live statically analyzes your Go HTTP services — extracts route definitions, request/response contracts, and authentication patterns — then generates beautiful, interactive API documentation.
- docs
- documentation
- documentation-generator
- golang