Wordlist Open Source Projects

Web path scanner

Directory/File, DNS and VHost busting tool written in Go

Version 2 is live! Wordlists sorted by probability originally created for password generation and testing - make sure your passwords aren't popular!

A fast, simple, recursive content discovery tool written in Rust.

Common User Passwords Profiler (CUPP)

Knock Subdomain Scan

GitHub repository for the SecureDrop whistleblower platform. Do not submit tips here!

《数据结构》-严蔚敏.吴伟民-教材源码与习题解析

A powerful and useful hacker dictionary builder for a brute-force attack

Rockyou for web fuzzing

A collection of snippets of codes and commands to make your life easier!

a tool for pentesters to help find delicious candy, by @l0ss and @Sh3r4 ( Twitter: @/mikeloss and @/sh3r4_hax )

Puredns is a fast domain resolver and subdomain bruteforcing tool that can accurately filter out wildcard subdomains and DNS poisoned entries.

DNS Takeover tool written in Go

Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.

A tool for automating cracking methodologies through Hashcat from the TrustedSec team.

hacking-tool termux-tools termux noob-friendly instagram-bot bruteforce-password-cracker wordlist-technique

Collection of some common wordlists such as RDP password, user name list, ssh password wordlist for brute force. IP Cameras Default Passwords.

Real-world infosec wordlists, updated regularly

MassDNS wrapper written in go to enumerate valid subdomains using active bruteforce as well as resolve subdomains with wildcard filtering and easy input-output support.

Passphrase wordlist and hashcat rules for offline cracking of long, complex passwords

A collection of wordlists dictionaries for password cracking

A virtual host scanner that performs reverse lookups, can be used with pivot tools, detect catch-all scenarios, work around wildcards, aliases and dynamic default pages.

:zap: Worlds fastest steghide cracker, chewing through millions of passwords per second :zap:

Information Gathering tool - DNS / Subdomains / Ports / Directories enumeration

A collection of special paths linked to common sensitive APIs, devops internals, frameworks conf, known misconfigurations, juicy APIs ..etc. It could be used as a part of web content discovery, to scan passively for high-quality endpoints and quick-wins.

JavaScript implementation of Bitcoin BIP39: Mnemonic code for generating deterministic keys

Generate smart and powerful wordlists

Wordlist, rules and masks from Kaonashi project (RootedCON 2019)

Generates combination of domain names from the provided input.

Create Best Wordlist From Python Tool In Termux

RockYou2021.txt is a MASSIVE WORDLIST compiled of various other wordlists. RockYou2021.txt DOES NOT CONTAIN USER:PASS logins!

A curated list of awesome tools, research, papers and other projects related to password cracking and password security.

Remove duplicates from MASSIVE wordlist, without sorting it (for dictionary-based password cracking)

1337 Wordlists for Bug Bounty Hunting

Infosec Wordlists and more.

A wordlist of API names for web application assessments

Automated tool for WiFi hacking.

A subdomain enumeration tool.

macOS keychain cracking tool

Python Wordlist Password Generator for Termux - Hack any fb, instagram, Wifi any Password list - Online Hacking

Human-readable digests.

Türk kullanıcıların parola seçimlerinin analizi için yapılmış bir çalışmadır

Work in progress...

An extremely effective subdomain enumeration wordlist of 3,000,000 lines, crafted by harvesting SSL certs from the entire IPv4 space.

Monolingual wordlists with pronunciation information in IPA

BruteSploit is a collection of method for automated Generate, Bruteforce and Manipulation wordlist with interactive shell. That can be used during a penetration test to enumerate and maybe can be used in CTF for manipulation,combine,transform and permutation some words or file text :p

A script to enumerate virtual hosts on a server.

A fast, robust Python library to check for offensive language in strings.

Command line tool to fetch, decode, brute-force and craft session cookies of a Flask application by guessing secret keys.

Fast directory scanning and scraping tool

Decode All Bases - Base Scheme Decoder

Fetch, install and search wordlist archives from websites and torrent peers.

Tool to find JavaScript files on Websites

Standalone password candidate generator using the PRINCE algorithm

Wifi Cracking

A sentiment analysis module for node.js

Liste di parole italiane

AFINN sentiment analysis in Python