This project integrates the entire network's outstanding offensive and defensive weapon tool projects, including automated utilization, subdomain name, directory scanning, port scanning and other information collection tools, major middleware, cms, OA vulnerability exploitation tools, blasting tools, intranet horizontal, anti-virus, social engineering phishing, emergency response, Party A's security information and other security attack and defense materials.
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Popularity
Repository stars8,23174,513Highest
7-day net stars——
Fork1,44925,205Highest
30-day trendInsufficient historyInsufficient history
Browse by purposeSecurity & privacySecurity & privacy
TypeApps & systemsApps & systems
SubcategorySecurity toolsSecurity tools
PlatformNot verifiedNot verified
Cost detailsCheck current official software, hosting, model and infrastructure pricing.Check current official software, hosting, model and infrastructure pricing.
Pricing source——
First collected2026-11-032026-11-03
MetricRepository stars, not unique users or individual-skill installsRepository stars, not unique users or individual-skill installs
LanguagePythonPHP
About this projectThis project integrates the entire network's outstanding offensive and defensive weapon tool projects, including automated utilization, subdomain name, directory scanning, port scanning and other information collection tools, major middleware, cms, OA vulnerability exploitation tools, blasting tools, intranet horizontal, anti-virus, social engineering phishing, emergency response, Party A's security information and other security attack and defense materials.SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Measured at2026-11-03 08:29 UTC2026-11-03 08:24 UTC
License tiers are derived from metadata. Check obligations for your use; unknown does not mean prohibited. Ranked by repository stars, one position per repository. Stars and forks are not user counts.