mirror of
https://github.com/danielmiessler/SecLists.git
synced 2025-05-07 19:30:48 -04:00
This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target). |
||
---|---|---|
.. | ||
BiblePass | ||
Common-Credentials | ||
Cracked-Hashes | ||
Default-Credentials | ||
Honeypot-Captures | ||
Leaked-Databases | ||
Malware | ||
Permutations | ||
Software | ||
WiFi-WPA | ||
500-worst-passwords.txt | ||
500-worst-passwords.txt.bz2 | ||
2020-200_most_used_passwords.txt | ||
bt4-password.txt | ||
cirt-default-passwords.txt | ||
citrix.txt | ||
clarkson-university-82.txt | ||
common_corporate_passwords.lst | ||
darkc0de.txt | ||
darkweb2017-top10.txt | ||
darkweb2017-top100.txt | ||
darkweb2017-top1000.txt | ||
darkweb2017-top10000.txt | ||
days.txt | ||
der-postillon.txt | ||
dutch_common_wordlist.txt | ||
dutch_passwordlist.txt | ||
dutch_wordlist | ||
german_misc.txt | ||
Keyboard-Combinations.txt | ||
months.txt | ||
Most-Popular-Letter-Passes.txt | ||
mssql-passwords-nansh0u-guardicore.txt | ||
openwall.net-all.txt | ||
PHP-Magic-Hashes.txt | ||
probable-v2-top207.txt | ||
probable-v2-top1575.txt | ||
probable-v2-top12000.txt | ||
README.md | ||
richelieu-french-top5000.txt | ||
richelieu-french-top20000.txt | ||
SCRABBLE-hackerhouse.tgz | ||
scraped-JWT-secrets.txt | ||
seasons.txt | ||
stupid-ones-in-production.txt | ||
twitter-banned.txt | ||
unkown-azul.txt | ||
UserPassCombo-Jay.txt | ||
xato-net-10-million-passwords-10.txt | ||
xato-net-10-million-passwords-100.txt | ||
xato-net-10-million-passwords-1000.txt | ||
xato-net-10-million-passwords-10000.txt | ||
xato-net-10-million-passwords-100000.txt | ||
xato-net-10-million-passwords-1000000.txt | ||
xato-net-10-million-passwords-dup.txt | ||
xato-net-10-million-passwords.txt |
The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.
- Password lists containing the count are located in the "withcount" folder.
- Lists over 100Mb have been compressed.
scraped-JWT-secrets.txt
This wordlist is from https://github.com/wallarm/jwt-secrets
Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more:
- Breach compilation (original link recovered)
- Weekpass