mirror of
https://github.com/danielmiessler/SecLists
synced 2025-12-06 08:53:59 +01:00
This file is no longer present on the NCSC website so it was grabbed from the latest copy in The National Archives - https://webarchive.nationalarchives.gov.uk/ukgwa/20241220133328/https://www.ncsc.gov.uk/static-assets/documents/PwnedPasswordsTop100k.txt |
||
|---|---|---|
| .. | ||
| Books | ||
| Common-Credentials | ||
| Cracked-Hashes | ||
| Default-Credentials | ||
| Honeypot-Captures | ||
| Keyboard-Walks | ||
| Leaked-Databases | ||
| Malware | ||
| Permutations | ||
| PHP-Hashes | ||
| Software | ||
| WiFi-WPA | ||
| Wikipedia | ||
| clarkson-university-82.txt | ||
| corporate_passwords.txt | ||
| darkc0de.txt | ||
| days.txt | ||
| der-postillon.txt | ||
| months.txt | ||
| Most-Popular-Letter-Passes.txt | ||
| mssql-passwords-nansh0u-guardicore.txt | ||
| openwall.net-all.txt | ||
| README.md | ||
| SCRABBLE-hackerhouse.tgz | ||
| scraped-JWT-secrets.txt | ||
| seasons.txt | ||
| stupid-ones-in-production.txt | ||
| unkown-azul.txt | ||
The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.
- Password lists containing the count are located in the "withcount" folder.
- Lists over 100Mb have been compressed.
scraped-JWT-secrets.txt
This wordlist is from https://github.com/wallarm/jwt-secrets
Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more:
- Breach compilation (original link recovered)
- Weakpass