SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Web path scanner
Rockyou for web fuzzing
π Yet another collection of wordlists
1337 Wordlists for Bug Bounty Hunting
Monolingual wordlists with pronunciation information in IPA
OWASP Web Recon & Directory Discovery Platform
π‘οΈ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
Real-world infosec wordlists, updated regularly
β
Go PCFG Password Generator 2026: Secure Probabilistic Wordlist Tool
PCFG Password Cracking Patterns Generator in Pure Go 2026
Fast and customizable subdomain wordlist generator using DSL