SecLists/Passwords
Marios K. Pappas b8a5b67a5a
Added some commonly used rotated passwords.
This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target).
2023-02-22 19:42:58 +02:00
..
BiblePass dos2unix 2020-11-03 23:57:08 +00:00
Common-Credentials dos2unix 2021-08-28 21:29:32 +01:00
Cracked-Hashes Quick rename of files 2018-03-05 11:03:11 +00:00
Default-Credentials update default-passwords.csv 2022-08-22 19:55:03 +04:00
Honeypot-Captures strip trailing whitespace 2020-05-27 14:26:51 +01:00
Leaked-Databases Merge pull request #653 from soufianetahiri/master 2021-11-24 09:55:42 +00:00
Malware Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
Permutations rename 's/_/-/g' 2017-08-23 14:55:06 +01:00
Software Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
WiFi-WPA Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
500-worst-passwords.txt fix: Dedupe wordlist 2022-11-07 12:32:42 +03:00
500-worst-passwords.txt.bz2 Add 500 worst passwords 2020-08-11 14:19:17 +02:00
2020-200_most_used_passwords.txt fix: Dedupe wordlist 2022-11-07 12:23:37 +03:00
bt4-password.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
cirt-default-passwords.txt Added Zyxel default username and password based on CVE-2020-29583 and CVE-2016-10401 2021-01-05 09:08:32 +01:00
citrix.txt Updated Citrix and Avaya default passwords 2021-07-22 00:21:57 +02:00
clarkson-university-82.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
common_corporate_passwords.lst Added some commonly used rotated passwords. 2023-02-22 19:42:58 +02:00
darkc0de.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
darkweb2017-top10.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
darkweb2017-top100.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
darkweb2017-top1000.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
darkweb2017-top10000.txt Close #291 - Fix encoding issues 2019-05-08 11:04:00 +01:00
days.txt Create days.txt 2021-12-15 15:11:20 -06:00
der-postillon.txt Add worlds-safest-password list by Der Postillon 2019-04-05 09:29:47 +02:00
dutch_common_wordlist.txt added dutch passwordlist 2020-04-29 12:21:51 -04:00
dutch_passwordlist.txt dos2unix 2021-08-28 21:29:32 +01:00
dutch_wordlist Added dutchwordlist 2019-10-01 12:22:18 +02:00
german_misc.txt fix: Dedupe wordlist 2022-11-07 12:18:49 +03:00
Keyboard-Combinations.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
months.txt Create months.txt 2021-12-15 15:10:21 -06:00
Most-Popular-Letter-Passes.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
mssql-passwords-nansh0u-guardicore.txt Add MSSQL from guardicore: labs_campaigns-Nansh0u 2019-05-30 12:20:13 +01:00
openwall.net-all.txt strip trailing whitespace 2020-05-27 14:26:51 +01:00
PHP-Magic-Hashes.txt Adding sha256 magic hash 2019-07-11 15:47:42 +02:00
probable-v2-top207.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
probable-v2-top1575.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
probable-v2-top12000.txt Add "-" to split up words, moved files since PR accepted 2018-03-05 10:30:27 +00:00
README.md Merge into README.md 2022-08-02 07:11:45 +01:00
richelieu-french-top5000.txt Add richelieu 2019-07-03 14:04:48 +01:00
richelieu-french-top20000.txt fix: Dedupe wordlist 2022-11-07 13:01:06 +03:00
SCRABBLE-hackerhouse.tgz Add scrabble 2019-08-13 12:42:49 +01:00
scraped-JWT-secrets.txt Added scraped-JWT-secrets.txt 2022-06-24 00:31:22 -03:00
seasons.txt Create seasons.txt 2021-12-15 15:04:49 -06:00
stupid-ones-in-production.txt Create stupid-ones-in-production.txt 2019-08-08 14:59:22 -05:00
twitter-banned.txt Added Donald Trump leaked passwords (2016 + 2020) 2020-11-03 18:55:07 +07:00
unkown-azul.txt fix: Dedupe wordlist 2022-11-07 12:34:57 +03:00
UserPassCombo-Jay.txt "Passwords/" Clean up 2017-07-11 13:18:31 +01:00
xato-net-10-million-passwords-10.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-100.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-1000.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-10000.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-100000.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-1000000.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords-dup.txt standardisze line endings 2020-05-27 14:10:50 +01:00
xato-net-10-million-passwords.txt standardisze line endings 2020-05-27 14:10:50 +01:00

The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.


  • Password lists containing the count are located in the "withcount" folder.
  • Lists over 100Mb have been compressed.

scraped-JWT-secrets.txt

This wordlist is from https://github.com/wallarm/jwt-secrets


Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more: