Wordlists
February 10, 2026 ยท View on GitHub
Misc
- ANDROID all permissions (324 words)
- ANTIVIRUS names (570 words)
- CSS all properties (179 words)
- EMAIL free providers (3'619 words)
- EMAIL top 100 providers (100 words)
- HTML all elements (142 words)
- JS event handlers (134 words)
- Top Level Domains TLDs (1'481 words)
- USER-AGENTS (4'213 words)
Patterns
- REGEX API Key (42 words)
- REGEX web errors (28 words)
Dictionaries
- BRAZILIAN a-z - no special chars (204'448 words)
- BRAZILIAN only with special chars (71'054 words)
- COUNTRY with cc (254 words)
- DANISH a-z - no special chars (232'249 words)
- DANISH only with special chars (1'975 words)
- DUTCH a-z - no special chars (328'986 words)
- ENGLISH a-z - no special chars (241'561 words)
- ENGLISH top10k from google (10'000 words)
- FRENCH a-z - no special chars (85'915 words)
- FRENCH only with special chars (2'115 words)
- GERMAN a-z - no special chars (278'427 words)
- IRISH a-z - no special chars (5'224 words)
- IRISH only with special chars (11'146 words)
- ITALIAN a-z - no special chars (102'469 words)
- JAPANESE ROMANJI - no special chars (22'336 words)
- PORTUGUESE a-z - no special chars (305'039 words)
- PORTUGUESE only with special chars (114'360 words)
- SPANISH a-z - no special chars (68'673 words)
- SWEDISH a-z - no special chars (79'763 words)
- SWEDISH only with special chars (41'663 words)
Payloads
- SQLI blind time-based (283 words)
Discovery
- ASP files only (20'481 words)
- ASP files with path (3'992 words)
- BACKUP files only (1'015 words)
- BACKUP files with path (1'286 words)
- DIRECTORY only one (1'993 words)
- DLL files (208 words)
- Dot files (2'199 paths)
- FUNCTIONS mix (1'555 words)
- JSP files only (2'158 words)
- JSP files with path (167 words)
- LOG files only (142 words)
- PARAMETERS actions (28 words)
- PARAMETERS after (9 words)
- PARAMETERS before (8 words)
- PARAMETERS mix (20'376 words)
- PHP files only (43'795 words)
- PHP files with path (13'691 words)
- TOP-10K-WEB-DIRECTORIES from 10M urlteam links (10'000 words)
- USER field names (228 words)
- TOP Robots.txt Disallow Paths from 140GB CommonCrawl data (15'778 paths)
- URLhaus URL Paths sorted by frequency (15'702 paths)
Large Password Lists (Torrent)
- CrackStation's Password Cracking Dictionary [ONLY "real human" passwords] - 247MB compressed
- CrackStation's Password Cracking Dictionary [FULL] - 4.2GB compressed
Large Password Lists (HTTP Direct Download)
- 10-million-combos.zip - 85MB compressed
- crackstation-human-only.txt.gz - 246MB compressed
- b0n3z_dictionary-SPLIT-BY-LENGTH-34.6GB.7z - 3GB compressed
- crackstation.txt.gz - 4GB compressed
- WPA-PSK WORDLIST 3 Final (13 GB).rar - 4GB compressed
- 36.4GB-18_in_1.lst.7z - 5GB compressed
- b0n3z-wordlist-sorted_REPACK-69.3GB.7z - 9GB compressed
Others Repositories
- FUZZING - SecLists
- FUZZING - FuzzDB
- DOMAIN - Easylist
- DOMAIN - Fanboy/Adblock
- DICTIONNARY - English Words
- DICTIONNARY - Probable Wordlists
- DICTIONNARY - Most common English words from Google sorted by frequency
External Ressources
- DNS - Cisco Umbrella Top 1 million
- DNS - Cisco Umbrella Top TLDs
- DNS - Alexa Top 1 million
- DOMAIN - FilterLists
- PASSWORD - OpenWall
- PASSWORD - CrackStation
- PASSWORD - g0tmi1k's blog
- PASSOWRD - Skull Security
- WORDLIST - Hashcrack
- WORDLIST - md5this
- WORDLIST - Packet Storm
- FIRST & LAST NAMES - philipperemy