# SecLists | Daniel Miessler 🛡️ | Knowledge Base | Instagit

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

GitHub Stars: 69.2k

Repository: https://github.com/danielmiessler/SecLists

---

## Articles

### [How to Use SecLists with Hydra for Password Spraying: A Complete Guide](/danielmiessler/SecLists/how-to-use-seclists-with-hydra-for-password-spraying)

Master password spraying with SecLists and Hydra. Learn to clone SecLists and configure Hydra for efficient brute-force attacks. Our guide shows you how to target credentials effectively.

- Tags: tutorial
- Published: 2026-03-03

### [Best SecLists Wordlists for XSS Fuzzing: A Complete Guide to Payloads and Usage](/danielmiessler/SecLists/best-seclists-wordlists-for-xss-fuzzing)

Discover the best SecLists wordlists for XSS fuzzing. Learn to effectively use XSS-payloadbox.txt and XSS-Polyglots.txt for automated and manual security testing.

- Tags: best-practices
- Published: 2026-03-03

### [SecLists Payload Collections for SQL Injection Testing: A Complete Guide](/danielmiessler/SecLists/seclists-payload-collections-for-sql-injection-testing)

Master SQL injection testing with SecLists payload collections. Explore database-specific and generic payloads for thorough security assessments. Download the best resources now.

- Tags: tutorial
- Published: 2026-03-03

### [Using SecLists with Burp Suite for Web Testing: Integration Guide](/danielmiessler/SecLists/using-seclists-with-burp-suite-for-web-testing)

Integrate SecLists with Burp Suite for powerful web testing. Automate directory brute-forcing, extension enumeration, and vulnerability fuzzing efficiently.

- Tags: how-to-guide
- Published: 2026-03-03

### [SecLists Username Lists for Brute Force Attacks: A Comprehensive Guide](/danielmiessler/SecLists/seclists-username-lists-for-brute-force-attacks)

Explore SecLists username lists for effective brute force attacks. Discover curated datasets from danielmiessler/SecLists formatted for common tools like Hydra and Burp Intruder.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Contribute Wordlists to SecLists: The Complete Contributor Guide](/danielmiessler/SecLists/how-to-contribute-wordlists-to-seclists)

Learn how to contribute wordlists to SecLists. Follow our easy guide for clean submissions using Pull Requests and Conventional Commits for seamless integration.

- Tags: how-to-guide
- Published: 2026-03-03

### [Using SecLists for Subdomain Enumeration: A Complete Guide](/danielmiessler/SecLists/using-seclists-for-subdomain-enumeration)

Master subdomain enumeration with SecLists. Discover curated wordlists for massdns dnsx and amass in this comprehensive guide for security assessments.

- Tags: how-to-guide
- Published: 2026-03-03

### [SecLists Password Wordlists for Penetration Testing: Structure, Usage, and Examples](/danielmiessler/SecLists/seclists-password-wordlists-for-penetration-testing)

Discover SecLists password wordlists for penetration testing. Enhance your security testing with this essential resource used by professionals with tools like Hashcat and Hydra.

- Tags: tutorial
- Published: 2026-03-03

### [Best SecLists Wordlists for Directory Enumeration: The Complete Guide](/danielmiessler/SecLists/best-seclists-wordlists-for-directory-enumeration)

Discover the best SecLists wordlists for directory enumeration. Explore common directories, raft series, and combined lists for effective web content discovery and reconnaissance.

- Tags: best-practices
- Published: 2026-03-03

### [How to Use SecLists for Credential Stuffing Attacks](/danielmiessler/SecLists/how-to-use-seclists-for-credential-stuffing-attacks)

Learn to use SecLists for credential stuffing attacks. Discover curated wordlists to test authentication endpoint security effectively and responsibly.

- Tags: how-to-guide
- Published: 2026-03-03

### [Best Wordlists for XSS Testing: A Complete Guide to SecLists’ XSS Payload Collections](/danielmiessler/SecLists/best-wordlists-for-xss-testing)

Discover the best wordlists for XSS testing in SecLists! Explore curated XSS payload collections essential for effective web vulnerability assessments. Enhance your security toolkit today.

- Tags: best-practices
- Published: 2026-03-03

### [Best Wordlists for SQL Injection Testing from SecLists](/danielmiessler/SecLists/best-wordlists-for-sql-injection-testing)

Discover the best SQL injection wordlists in SecLists Fuzzing SQLi directory. Find generic, engine-specific, and blind SQLi payloads to enhance your security testing.

- Tags: best-practices
- Published: 2026-03-03

### [How to Use SecLists for Subdomain Enumeration: A Complete Guide to DNS Wordlists](/danielmiessler/SecLists/how-to-use-seclists-for-subdomain-enumeration)

Master subdomain enumeration with SecLists DNS wordlists. Discover subdomains efficiently using tools like massdns and amass. Explore comprehensive lists for rapid reconnaissance.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists for Directory Busting: A Complete Guide with Examples](/danielmiessler/SecLists/how-to-use-seclists-for-directory-busting)

Master directory busting with SecLists. Explore this guide to effectively use SecLists wordlists with tools like gobuster and ffuf for faster web content discovery.

- Tags: how-to-guide
- Published: 2026-03-03

### [SecLists Directory Structure Explained: Complete Guide to the Security Tester's Wordlist Repository](/danielmiessler/SecLists/seclists-directory-structure-explained)

Understand the SecLists directory structure. Quickly find usernames, passwords, fuzzing payloads, and regex patterns for faster security assessments. Explore the complete guide to this essential wordlist repository.

- Tags: tutorial
- Published: 2026-03-03

### [How to Use SecLists with Hydra: A Complete Guide to Brute-Force Testing](/danielmiessler/SecLists/how-to-use-seclists-with-hydra)

Learn to use SecLists with Hydra for effective brute-force testing. Target network services with username and password lists for parallelized login attempts.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists with ffuf for Web Fuzzing and Enumeration](/danielmiessler/SecLists/how-to-use-seclists-with-ffuf)

Learn to use SecLists with ffuf for powerful web fuzzing and enumeration. Discover directories, files, and parameters automatically by pointing ffuf to curated SecLists wordlists.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists with wfuzz for Web Application Security Testing](/danielmiessler/SecLists/how-to-use-seclists-with-wfuzz)

Learn to use SecLists with wfuzz for web application security testing. Quickly reference curated security payloads to fuzz URLs and endpoints effectively.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists with Burp Suite: Complete Integration Guide](/danielmiessler/SecLists/how-to-use-seclists-with-burp-suite)

Easily integrate danielmiessler/SecLists with Burp Suite. Load UTF-8 wordlists to automate directory enumeration, credential stuffing, and vulnerability fuzzing for enhanced security testing.

- Tags: how-to-guide
- Published: 2026-03-03

### [Best Wordlists for Bug Bounty Hunting: The Essential SecLists Guide](/danielmiessler/SecLists/best-wordlists-for-bug-bounty-hunting)

Discover the best wordlists for bug bounty hunting in the essential SecLists guide. Enhance your security testing with curated datasets for credential spraying directory brute-forcing and payload injection.

- Tags: best-practices
- Published: 2026-03-03

### [How to Contribute to SecLists: A Complete Guide to Submitting Security Wordlists](/danielmiessler/SecLists/how-to-contribute-to-seclists)

Learn how to contribute to SecLists by forking the repo, adding your wordlists to the correct directory, updating the README, and submitting a pull request effortlessly.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists for Username Enumeration: 5 Proven Methods](/danielmiessler/SecLists/how-to-use-seclists-for-username-enumeration)

Discover 5 proven methods to perform username enumeration using SecLists wordlists with tools like Hydra and Nmap. Enhance your security testing today.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists for Fuzzing: Methods, Wordlists, and Tool Integration](/danielmiessler/SecLists/how-to-use-seclists-for-fuzzing)

Learn to use SecLists for effective fuzzing. Discover methods, wordlists, and tool integration to automate security testing and find vulnerabilities.

- Tags: how-to-guide
- Published: 2026-03-03

### [How to Use SecLists for Password Cracking: A Complete Guide to Credential Testing](/danielmiessler/SecLists/how-to-use-seclists-for-password-cracking)

Learn to use SecLists for password cracking. Clone the repository and utilize wordlists from the Passwords directory with Hashcat or John the Ripper for effective credential testing.

- Tags: how-to-guide
- Published: 2026-03-03