Wordlists
Yet another collection of wordlists. They are sorted by their content. Feel free to request to add new wordlists.
## 🐳 Docker Images
There are three Docker tags available for the [`kkrypt0nn/wordlists`](https://hub.docker.com/r/kkrypt0nn/wordlists) Docker repository:
- [`alpine-latest`](https://hub.docker.com/r/kkrypt0nn/wordlists/tags?name=alpine-latest)
- [`debian-latest`](https://hub.docker.com/r/kkrypt0nn/wordlists/tags?name=debian-latest)
- [`ubuntu-latest`](https://hub.docker.com/r/kkrypt0nn/wordlists/tags?name=ubuntu-latest)
These will have a `/wordlists` folder with all the wordlists in there for you to use them.
## 📦 HackTheBox Wordlists
[Hack The Box](https://hackthebox.com) is a platform designed for practicing penetration testing skills in a legal and controlled environment. It offers various challenges and real-world scenarios for users to sharpen their hacking abilities.
In the [`wordlists/htb`](https://github.com/kkrypt0nn/wordlists/tree/main/wordlists/htb) folder, you'll find a collection of custom wordlists I created specifically for use on HTB. As I got more into the platform and had fun solving challenges, these wordlists became invaluable for tasks like brute-forcing and enumeration. Feel free to use them for your own HTB adventures, and I hope they help you level up your hacking skills!
## 🌍 Contributing
If you have a wordlist that you wish to see here, please post them [here](https://github.com/kkrypt0nn/wordlists/issues).
If you already have a wordlist ready to be added, make sure to [open a pull request](https://github.com/kkrypt0nn/wordlists/pulls).
## 📜 Wordlists
Togglable Wordlists
Discovery
- Apache - 13,232 Lines
- Apache User Enum 1.0 - 8,916 Lines
- Apache User Enum 2.0 - 10,341 Lines
- Big - 20,469 Lines
- Common - 4,739 Lines
- Common SQL Columns - 2,694 Lines
- Common SQL Tables - 3,695 Lines
- Conf - 100,895 Lines
- Directories - 58,655 Lines
- Directory List 1.0 - 141,694 Lines
- Directory List 2.3 Medium - 220,545 Lines
- Directory List 2.3 Small - 87,649 Lines
- Directory List Lowercase 2.3 Medium - 207,628 Lines
- Directory List Lowercase 2.3 Small - 81,628 Lines
- Extensions Common - 43 Lines
- Fuzz Php Special - 136,921 Lines
- Gitignore - 1,017 Lines
- Indexes - 10 Lines
- Joomla - 1,544 Lines
- JSP - 67,213 Lines
- LFI All - 1,485 Lines
- LFI Unix - 1,226 Lines
- LFI Windows - 259 Lines
- Most Common - 1,166 Lines
- Robots - 990 Lines
- Sensitive Files Unix - 16 Lines
- Sensitive Files Windows - 7 Lines
- Swagger - 958,874 Lines
- TLDs - 1,442 Lines
- Top Subdomains - 114,441 Lines
- WP Plugins - 104,063 Lines
- WP Themes - 27,830 Lines
Famous
HTB
Languages
- Arabic - 465,914 Lines
- Croatian - 215,956 Lines
- Czech - 535,889 Lines
- Danish - 154,437 Lines
- Dutch - 173,562 Lines
- English - 354,297 Lines
- French - 336,531 Lines
- Georgian - 143,053 Lines
- German - 1,908,815 Lines
- Hebrew - 469,750 Lines
- Italian - 95,152 Lines
- Norwegian - 322,043 Lines
- Polish - 300,676 Lines
- Portuguese - 312,367 Lines
- Russian - 379,323 Lines
- Serbian - 263,909 Lines
- Spanish - 70,157 Lines
- Swedish - 72,370 Lines
- Turkish - 371,169 Lines
- Ukrainian - 331,520 Lines
Miscellaneous
Names
Passwords
- 000Webhost - 720,302 Lines
- Bt4 Passwords - 1,652,902 Lines
- Burnett - 1,024 Lines
- Common Passwords Win - 815 Lines
- Common Roots - 4,724 Lines
- Darkweb 2017 - 9,999 Lines
- Db2 Default Passwords - 8 Lines
- Default Passwords For Services - 1,243 Lines
- Dutch Passwords - 4,322,834 Lines
- Hak5 - 2,351 Lines
- Honeynet - 226,081 Lines
- HTTP Default Passwords - 19 Lines
- Indian Passwords - 13,154 Lines
- Ipmi Passwords - 999 Lines
- Keyboard Patterns - 20 Lines
- Md5Decryptor - 3,431,316 Lines
- Medical Devices Passwords - 173 Lines
- Mirai Passwords - 42 Lines
- Most Used Passwords - 999,998 Lines
- Most Used Passwords Ncsc - 100,000 Lines
- Nord VPN - 1,437 Lines
- Openwall - 3,721,224 Lines
- Password - 88,406 Lines
- Postgres Default Passwords - 4 Lines
- Probable WPA - 4,800 Lines
- Tomcat Mgr Default Passwords - 7 Lines
- Top Adobe Passwords - 100 Lines
- Unix Passwords - 1,021 Lines
- Xato Net Passwords - 5,189,454 Lines
Security Question Answers
Stressing
User Agents
Hardware Type Specific
Operating System Name
- Android - 202,129 Lines
- Bada - 182 Lines
- BeOS - 18 Lines
- Blackberry OS - 2,365 Lines
- ChromeOS - 1,757 Lines
- Darwin - 549 Lines
- Fire OS - 1,869 Lines
- Freebsd - 812 Lines
- Haiku - 45 Lines
- HP webOS - 21 Lines
- iOS - 23,836 Lines
- Irix - 13 Lines
- Linux - 20,823 Lines
- Livearea - 52 Lines
- Mac - 655 Lines
- Mac OS X - 18,903 Lines
- Macos - 5,147 Lines
- OpenBSD - 285 Lines
- Palm OS - 18 Lines
- Rim Tablet OS - 12 Lines
- SunOS - 293 Lines
- Symbian - 3,438 Lines
- Unix Based OS - 598 Lines
- webOS - 42 Lines
- Windows - 183,284 Lines
- Windows Mobile - 354 Lines
- Windows Phone - 2,193 Lines
Software Name
- 1337Browser - 6 Lines
- Alexa Certification Scanner - 1 Lines
- Android Browser - 33,081 Lines
- Blackberry Browser - 1,854 Lines
- Brave - 70 Lines
- Chrome - 182,359 Lines
- Chromium - 870 Lines
- Curl - 232 Lines
- Discord - 3 Lines
- Ea Origin Browser - 312 Lines
- Edge - 3,605 Lines
- Electron Application - 632 Lines
- Excel - 9 Lines
- Facebook App - 6,810 Lines
- Facebook Bot - 19 Lines
- Firebird - 98 Lines
- Firefox - 26,035 Lines
- Google Earth - 39 Lines
- Google Earth Pro - 24 Lines
- Google Favicon Crawler - 3 Lines
- Google Search App - 2,381 Lines
- Google Site Verifier Bot - 2 Lines
- Googlebot - 276 Lines
- Iceweasel - 555 Lines
- Internet Explorer - 102,404 Lines
- Internet Explorer Mobile - 1,068 Lines
- Internet Tv Browser - 354 Lines
- iTunes - 30 Lines
- Java Runtime Environment - 518 Lines
- Kindle Browser - 76 Lines
- Motorola Internet Browser - 19 Lines
- Nintendo Browser - 89 Lines
- Nokia Browser - 1,240 Lines
- Onenote - 2 Lines
- Opera - 17,145 Lines
- Opera Mini - 30,825 Lines
- Outlook - 384 Lines
- Pinterest App - 1,283 Lines
- Pinterest Bot - 6 Lines
- Playstation 4 Browser - 72 Lines
- Powerpoint - 10 Lines
- Python Urllib - 18 Lines
- Safari - 12,186 Lines
- Samsung Browser - 5,326 Lines
- Slackbot Link Checker - 2 Lines
- Sony Web Browser - 4 Lines
- Tweetmeme Bot - 3 Lines
- Twitter App - 154 Lines
- Twitterbot - 4 Lines
- Valve Steam Game Overlay - 1,009 Lines
- Vision Mobile Browser - 3 Lines
- W3C Css Validator - 4 Lines
- W3C Link Checker - 6 Lines
- W3C Validator - 9 Lines
- Webtv - 6 Lines
- Wget - 70 Lines
- Word - 32 Lines
- Yandex Browser - 2,175 Lines
Usernames
Vulnerabilities
- Discovery
- Apache - 13,232 Lines
- Apache User Enum 1.0 - 8,916 Lines
- Apache User Enum 2.0 - 10,341 Lines
- Big - 20,469 Lines
- Common - 4,739 Lines
- Common SQL Columns - 2,694 Lines
- Common SQL Tables - 3,695 Lines
- Conf - 100,895 Lines
- Directories - 58,655 Lines
- Directory List 1.0 - 141,694 Lines
- Directory List 2.3 Medium - 220,545 Lines
- Directory List 2.3 Small - 87,649 Lines
- Directory List Lowercase 2.3 Medium - 207,628 Lines
- Directory List Lowercase 2.3 Small - 81,628 Lines
- Extensions Common - 43 Lines
- Fuzz Php Special - 136,921 Lines
- Gitignore - 1,017 Lines
- Indexes - 10 Lines
- Joomla - 1,544 Lines
- JSP - 67,213 Lines
- LFI All - 1,485 Lines
- LFI Unix - 1,226 Lines
- LFI Windows - 259 Lines
- Most Common - 1,166 Lines
- Robots - 990 Lines
- Sensitive Files Unix - 16 Lines
- Sensitive Files Windows - 7 Lines
- Swagger - 958,874 Lines
- TLDs - 1,442 Lines
- Top Subdomains - 114,441 Lines
- WP Plugins - 104,063 Lines
- WP Themes - 27,830 Lines
- Famous
- HTB
- Languages
- Arabic - 465,914 Lines
- Croatian - 215,956 Lines
- Czech - 535,889 Lines
- Danish - 154,437 Lines
- Dutch - 173,562 Lines
- English - 354,297 Lines
- French - 336,531 Lines
- Georgian - 143,053 Lines
- German - 1,908,815 Lines
- Hebrew - 469,750 Lines
- Italian - 95,152 Lines
- Norwegian - 322,043 Lines
- Polish - 300,676 Lines
- Portuguese - 312,367 Lines
- Russian - 379,323 Lines
- Serbian - 263,909 Lines
- Spanish - 70,157 Lines
- Swedish - 72,370 Lines
- Turkish - 371,169 Lines
- Ukrainian - 331,520 Lines
- Miscellaneous
- Names
- Passwords
- 000Webhost - 720,302 Lines
- Bt4 Passwords - 1,652,902 Lines
- Burnett - 1,024 Lines
- Common Passwords Win - 815 Lines
- Common Roots - 4,724 Lines
- Darkweb 2017 - 9,999 Lines
- Db2 Default Passwords - 8 Lines
- Default Passwords For Services - 1,243 Lines
- Dutch Passwords - 4,322,834 Lines
- Hak5 - 2,351 Lines
- Honeynet - 226,081 Lines
- HTTP Default Passwords - 19 Lines
- Indian Passwords - 13,154 Lines
- Ipmi Passwords - 999 Lines
- Keyboard Patterns - 20 Lines
- Md5Decryptor - 3,431,316 Lines
- Medical Devices Passwords - 173 Lines
- Mirai Passwords - 42 Lines
- Most Used Passwords - 999,998 Lines
- Most Used Passwords Ncsc - 100,000 Lines
- Nord VPN - 1,437 Lines
- Openwall - 3,721,224 Lines
- Password - 88,406 Lines
- Postgres Default Passwords - 4 Lines
- Probable WPA - 4,800 Lines
- Tomcat Mgr Default Passwords - 7 Lines
- Top Adobe Passwords - 100 Lines
- Unix Passwords - 1,021 Lines
- Xato Net Passwords - 5,189,454 Lines
- Security Question Answers
- Stressing
- User Agents
- Hardware Type Specific
- Operating System Name
- Android - 202,129 Lines
- Bada - 182 Lines
- BeOS - 18 Lines
- Blackberry OS - 2,365 Lines
- ChromeOS - 1,757 Lines
- Darwin - 549 Lines
- Fire OS - 1,869 Lines
- Freebsd - 812 Lines
- Haiku - 45 Lines
- HP webOS - 21 Lines
- iOS - 23,836 Lines
- Irix - 13 Lines
- Linux - 20,823 Lines
- Livearea - 52 Lines
- Mac - 655 Lines
- Mac OS X - 18,903 Lines
- Macos - 5,147 Lines
- OpenBSD - 285 Lines
- Palm OS - 18 Lines
- Rim Tablet OS - 12 Lines
- SunOS - 293 Lines
- Symbian - 3,438 Lines
- Unix Based OS - 598 Lines
- webOS - 42 Lines
- Windows - 183,284 Lines
- Windows Mobile - 354 Lines
- Windows Phone - 2,193 Lines
- Software Name
- 1337Browser - 6 Lines
- Alexa Certification Scanner - 1 Lines
- Android Browser - 33,081 Lines
- Blackberry Browser - 1,854 Lines
- Brave - 70 Lines
- Chrome - 182,359 Lines
- Chromium - 870 Lines
- Curl - 232 Lines
- Discord - 3 Lines
- Ea Origin Browser - 312 Lines
- Edge - 3,605 Lines
- Electron Application - 632 Lines
- Excel - 9 Lines
- Facebook App - 6,810 Lines
- Facebook Bot - 19 Lines
- Firebird - 98 Lines
- Firefox - 26,035 Lines
- Google Earth - 39 Lines
- Google Earth Pro - 24 Lines
- Google Favicon Crawler - 3 Lines
- Google Search App - 2,381 Lines
- Google Site Verifier Bot - 2 Lines
- Googlebot - 276 Lines
- Iceweasel - 555 Lines
- Internet Explorer - 102,404 Lines
- Internet Explorer Mobile - 1,068 Lines
- Internet Tv Browser - 354 Lines
- iTunes - 30 Lines
- Java Runtime Environment - 518 Lines
- Kindle Browser - 76 Lines
- Motorola Internet Browser - 19 Lines
- Nintendo Browser - 89 Lines
- Nokia Browser - 1,240 Lines
- Onenote - 2 Lines
- Opera - 17,145 Lines
- Opera Mini - 30,825 Lines
- Outlook - 384 Lines
- Pinterest App - 1,283 Lines
- Pinterest Bot - 6 Lines
- Playstation 4 Browser - 72 Lines
- Powerpoint - 10 Lines
- Python Urllib - 18 Lines
- Safari - 12,186 Lines
- Samsung Browser - 5,326 Lines
- Slackbot Link Checker - 2 Lines
- Sony Web Browser - 4 Lines
- Tweetmeme Bot - 3 Lines
- Twitter App - 154 Lines
- Twitterbot - 4 Lines
- Valve Steam Game Overlay - 1,009 Lines
- Vision Mobile Browser - 3 Lines
- W3C Css Validator - 4 Lines
- W3C Link Checker - 6 Lines
- W3C Validator - 9 Lines
- Webtv - 6 Lines
- Wget - 70 Lines
- Word - 32 Lines
- Yandex Browser - 2,175 Lines
- Usernames
- Vulnerabilities
## ⚠️ Disclaimer
These wordlists are intended solely for ethical and legal purposes, such as security research, legally authorized penetration testing, and educational use. Unauthorized or illegal use is strictly prohibited.
By using this repository, you agree to follow all applicable laws and abide by the [Terms of Use](https://github.com/kkrypt0nn/wordlists/blob/main/TERMS_OF_USE.md).
## 🏁 Sources
The wordlists in this repository are not all made by myself. Therefore, starting February 2025, I will try my best to provide the source of each wordlist, as well as add the potential license/copyright notice of the wordlist in the [NOTICE.md](NOTICE.md) file. Considering this repository is quite old, I may not have the source for all of them, but as mentioned I will try my best.
The wordlists that are made by myself, for example all the stressing generated wordlists or wordlists gathered from words on websites, will have **no** license, as I believe there is no point in adding licenses for things you can generate yourself.
> _If you feel like I have used your wordlist and it is missing in the [NOTICE.md](NOTICE.md) file, feel free to open an issue/pull request._