SecLists/Passwords
2025-05-08 04:27:09 -03:00
..
Books fix(Password/Books): Modify variations to include all_lowercase with underscore and join, and all_uppercase underscore and joined. 2024-01-02 23:58:34 -07:00
Common-Credentials chore(wordlist): Moved 'xato-net' wordlists to the 'Common-Credentials' directory 2025-05-08 04:12:14 -03:00
Cracked-Hashes Update milw0rm-dictionary.txt 2024-02-11 10:23:11 +05:30
Default-Credentials chore(docs): Minor formatting fix 2025-05-08 02:36:10 -03:00
Honeypot-Captures strip trailing whitespace 2020-05-27 14:26:51 +01:00
Keyboard-Walks feat(keyboard walk): Add known keyboard walks 2025-03-04 09:02:46 -07:00
Leaked-Databases chore(wordlist): Moved 'cirt-twitter-banned.txt' wordlist into the 'Leaked-Databases' directory 2025-05-08 03:12:21 -03:00
Malware Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
Permutations rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
PHP-Hashes Rename folders 2024-04-05 10:42:21 +00:00
Software chore(wordlist): Moved 'bt4-passwords.txt' wordlist into the 'Software' directory 2025-05-08 03:25:56 -03:00
WiFi-WPA Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
Wikipedia add localized wikipedia wordlists 2023-06-28 12:28:35 +02:00
clarkson-university-82.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
corporate_passwords.txt fix(wordlist): Fixed file extension of the 'corporate_passwords' wordlist 2025-03-22 20:22:42 -03:00
darkc0de.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
days.txt Create days.txt 2021-12-15 15:11:20 -06:00
der-postillon.txt Add worlds-safest-password list by Der Postillon 2019-04-05 09:29:47 +02:00
months.txt Create months.txt 2021-12-15 15:10:21 -06:00
Most-Popular-Letter-Passes.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
mssql-passwords-nansh0u-guardicore.txt Add MSSQL from guardicore: labs_campaigns-Nansh0u 2019-05-30 12:20:13 +01:00
openwall.net-all.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
README.md feat(docs): Added documentation for the 'xato-net-10-million-passwords' wordlists 2025-05-08 04:27:09 -03:00
SCRABBLE-hackerhouse.tgz Add scrabble 2019-08-13 12:42:49 +01:00
scraped-JWT-secrets.txt [Github Action] Automated trickest wordlists update. 2025-03-12 07:04:09 +00:00
seasons.txt Create seasons.txt 2021-12-15 15:04:49 -06:00
stupid-ones-in-production.txt Create stupid-ones-in-production.txt 2019-08-08 14:59:22 -05:00
unkown-azul.txt fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00

The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.


  • Password lists containing the count are located in the "withcount" folder.
  • Lists over 100Mb have been compressed.

xato-net-10-million-passwords.txt

This file contains 5,189,454 unique passwords sorted from most to least common. The original dataset contained 10 millon username and passwords combos, which caused there to be millons of duplicate passwords.

xato-net-10-million-passwords-dup.txt

Same as xato-net-10-million-passwords.txt, but this only contains all passwords that appeared in the original dataset more than once. It holds 755,995 passwords.

scraped-JWT-secrets.txt

This wordlist is from https://github.com/wallarm/jwt-secrets


Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more: