SecLists/Passwords
2025-07-28 07:07:25 +00:00
..
Books fix(Password/Books): Modify variations to include all_lowercase with underscore and join, and all_uppercase underscore and joined. 2024-01-02 23:58:34 -07:00
Common-Credentials fix(wordlist): Cleaned up '100k-most-used-passwords-NCSC.txt' (PR #1235) 2025-07-26 08:21:48 -03:00
Cracked-Hashes Update milw0rm-dictionary.txt 2024-02-11 10:23:11 +05:30
Default-Credentials feat(docs): Added note about default-passwords.txt auto updating 2025-06-14 02:14:59 -03:00
Honeypot-Captures
Keyboard-Walks feat(keyboard walk): Add known keyboard walks 2025-03-04 09:02:46 -07:00
Leaked-Databases chore(wordlist): Removed wordlist 2025-05-08 05:14:02 -03:00
Malware
Permutations
PHP-Hashes Rename folders 2024-04-05 10:42:21 +00:00
Software chore(wordlist): Moved 'bt4-passwords.txt' wordlist into the 'Software' directory 2025-05-08 03:25:56 -03:00
WiFi-WPA
Wikipedia add localized wikipedia wordlists 2023-06-28 12:28:35 +02:00
clarkson-university-82.txt
corporate_passwords.txt fix(wordlist): Fixed file extension of the 'corporate_passwords' wordlist 2025-03-22 20:22:42 -03:00
darkc0de.txt
days.txt Create days.txt 2021-12-15 15:11:20 -06:00
der-postillon.txt
months.txt Create months.txt 2021-12-15 15:10:21 -06:00
Most-Popular-Letter-Passes.txt
mssql-passwords-nansh0u-guardicore.txt
openwall.net-all.txt
README.md fix(docs): Moved documentation to correct file 2025-05-08 04:29:52 -03:00
SCRABBLE-hackerhouse.tgz
scraped-JWT-secrets.txt [Github Action] Automated trickest wordlists update. 2025-07-28 07:07:25 +00:00
seasons.txt Create seasons.txt 2021-12-15 15:04:49 -06:00
stupid-ones-in-production.txt
unkown-azul.txt fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00

The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.


  • Password lists containing the count are located in the "withcount" folder.
  • Lists over 100Mb have been compressed.

scraped-JWT-secrets.txt

This wordlist is from https://github.com/wallarm/jwt-secrets


Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more: