SecLists/Passwords
2025-09-02 21:31:22 +00:00
..
Books
Common-Credentials fix(wordlist): Cleaned up '100k-most-used-passwords-NCSC.txt' (PR #1235) 2025-07-26 08:21:48 -03:00
Cracked-Hashes
Default-Credentials [Github Action] Updated default-passwords.txt 2025-09-02 21:31:22 +00:00
Honeypot-Captures
Keyboard-Walks feat(keyboard walk): Add known keyboard walks 2025-03-04 09:02:46 -07:00
Leaked-Databases chore(wordlist): Removed wordlist 2025-05-08 05:14:02 -03:00
Malware
Permutations
PHP-Hashes
Software chore(wordlist): Moved 'bt4-passwords.txt' wordlist into the 'Software' directory 2025-05-08 03:25:56 -03:00
WiFi-WPA
Wikipedia
clarkson-university-82.txt
corporate_passwords.txt fix(wordlist): Fixed file extension of the 'corporate_passwords' wordlist 2025-03-22 20:22:42 -03:00
darkc0de.txt
days.txt
der-postillon.txt
months.txt
Most-Popular-Letter-Passes.txt
mssql-passwords-nansh0u-guardicore.txt
openwall.net-all.txt
README.md fix(docs): Moved documentation to correct file 2025-05-08 04:29:52 -03:00
SCRABBLE-hackerhouse.tgz
scraped-JWT-secrets.txt [Github Action] Automated trickest wordlists update. 2025-07-28 07:07:25 +00:00
seasons.txt
stupid-ones-in-production.txt
unkown-azul.txt

The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.


  • Password lists containing the count are located in the "withcount" folder.
  • Lists over 100Mb have been compressed.

scraped-JWT-secrets.txt

This wordlist is from https://github.com/wallarm/jwt-secrets


Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more: