{"id":16552438,"url":"https://github.com/0xdevalias/wordlists","last_synced_at":"2026-02-10T18:32:12.526Z","repository":{"id":142415325,"uuid":"109063762","full_name":"0xdevalias/wordlists","owner":"0xdevalias","description":"A place to store my own wordlists, and link to others that are useful","archived":false,"fork":false,"pushed_at":"2023-11-15T22:27:11.000Z","size":156,"stargazers_count":107,"open_issues_count":0,"forks_count":25,"subscribers_count":9,"default_branch":"master","last_synced_at":"2025-11-29T06:40:46.932Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":null,"has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"mit","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/0xdevalias.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null,"zenodo":null},"funding":{"github":"0xdevalias","ko_fi":"devalias","custom":["https://buymeacoff.ee/devalias"]}},"created_at":"2017-10-31T23:38:42.000Z","updated_at":"2025-09-15T11:32:42.000Z","dependencies_parsed_at":"2023-11-15T23:28:43.626Z","dependency_job_id":null,"html_url":"https://github.com/0xdevalias/wordlists","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"purl":"pkg:github/0xdevalias/wordlists","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fwordlists","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fwordlists/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fwordlists/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fwordlists/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/0xdevalias","download_url":"https://codeload.github.com/0xdevalias/wordlists/tar.gz/refs/heads/master","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/0xdevalias%2Fwordlists/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":286080680,"owners_count":29311121,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2026-02-10T17:48:59.043Z","status":"ssl_error","status_checked_at":"2026-02-10T17:45:37.240Z","response_time":65,"last_error":"SSL_connect returned=1 errno=0 peeraddr=140.82.121.5:443 state=error: unexpected eof while reading","robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":false,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-11T19:44:52.373Z","updated_at":"2026-02-10T18:32:12.507Z","avatar_url":"https://github.com/0xdevalias.png","language":null,"readme":"# wordlists\n\nA place to store my own wordlists, and link to others that are useful\n\n## SecLists\n\n* https://github.com/danielmiessler/SecLists\n    * \"SecLists is the security tester's companion. It is a collection of multiple types of lists used during security assessments. List types include usernames, passwords, URLs, sensitive data grep strings, fuzzing payloads, and many more.\"\n    * Massive collection of wordlists.. but comes in pretty weighty (~320mb + git overheads) when you only end up using a couple of the lists..\n    * https://github.com/danielmiessler/SecLists/tree/master/Discovery/Web_Content\n    * https://github.com/danielmiessler/SecLists/tree/master/Fuzzing\n\n## Commonspeak\n\n* https://github.com/pentester-io/commonspeak\n    * \"Content discovery wordlists generated using BigQuery\"\n    * https://pentester.io/commonspeak-bigquery-wordlists/\n\n## Subpop Results\n\n* https://github.com/skooch/subpop-results\n    * \"Results from the latest Rapid7 Sonar FDNS processed by subpop for use with tools\"\n* https://github.com/bitquark/dnspop\n    * \"Analysis of DNS records to find popular trends\"\n\n## Certificate Transparency Subdomains\n\n* https://github.com/internetwache/CT_subdomains\n    * \"An hourly updated list of subdomains gathered from certificate transparency logs\"\n\n## Project Sonar / Censys\n\n* https://www.censys.io/\n* https://scans.io/\n* https://github.com/rapid7/sonar/wiki\n\n## Big List of Naughty Strings\n\n* https://github.com/minimaxir/big-list-of-naughty-strings\n    * \"The Big List of Naughty Strings is a list of strings which have a high probability of causing issues when used as user-input data.\"\n\n## Drek / WatchTower (Static Code Analysis)\n\n* https://github.com/chrisallenlane/drek\n    * \"A static-code-analysis tool for performing security-focused code reviews. It enables an auditor to swiftly map the attack-surface of a large application, with an emphasis on identifying development anti-patterns and footguns.\"\n    * https://github.com/chrisallenlane/drek-signatures : Example signature files for drek\n    * https://github.com/chrisallenlane/drek-signatures/issues/1 : Issue to merge Bishop Fox watchtower signature additions\n    * https://github.com/chrisallenlane/drek-signatures/issues/2 : Issue to merge Java signature additions\n        * https://github.com/schristiaens/drek-signatures: Fork with some extra additions\n* https://github.com/chrisallenlane/watchtower\n    * \"(old, deprecated) : Watchtower is a Static Code Analysis tool designed to assist security auditors who are tasked with performing manual code reviews. It is platform- and language-agnostic.\"\"\n    * https://github.com/BishopFox/watchtower (fork, updated signatures)\n        * https://github.com/BishopFox/watchtower/compare/c148caf4867d7eb5ddfa279d8e3186852f66e7f4...BishopFox:master seems to show the new things that were added\n* Other potential sources of useful material\n    * https://stackoverflow.com/questions/3115559/exploitable-php-functions\n    * This may not be the most up to date source, but apparently RIPS maintained some good lists of sources/sinks\n      * https://github.com/robocoder/rips-scanner/blob/master/config/sources.php\n      * https://github.com/robocoder/rips-scanner/blob/master/config/sinks.php\n      * https://sourceforge.net/projects/rips-scanner/files/ (download latest version and grab them from there)\n\n## Password Breaches\n\n* https://github.com/zxsecurity/steamer\n    * \"For importing, searching, and managing public password breach data\"\n\n## Miscellaneous / Unsorted\n\n* https://github.com/swisskyrepo/PayloadsAllTheThings\n    * \"A list of useful payloads and bypass for Web Application Security and Pentest/CTF\"\n* https://github.com/first20hours/google-10000-english\n    * \"This repo contains a list of the 10,000 most common English words in order of frequency, as determined by n-gram frequency analysis of the Google's Trillion Word Corpus.\"\n* https://udger.com/resources/ua-list\n    * \"Udger database includes detailed information about ever single user agent and operating system\"\n* https://github.com/carlospolop/Auto_Wordlists\n  * \u003e Auto_Wordlists\n  * \u003e This repo will generate wordlist in 3 different ways:\n    \u003e \n    \u003e * The wordlist `wordlists/trusted_resolvers.txt` are the IPs of DNS servers that, apparently, can be trusted. It's generated every 8 hours.\n    \u003e * The wordlist `wordlists/ghdb.json.txt` is the google hacking database in JSON format. It's generated once a week.\n    \u003e * The rest of the wordlists are web fuzzing/discovery wordlists. They are generated once a week.\n","funding_links":["https://github.com/sponsors/0xdevalias","https://ko-fi.com/devalias","https://buymeacoff.ee/devalias"],"categories":[],"sub_categories":[],"project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdevalias%2Fwordlists","html_url":"https://awesome.ecosyste.ms/projects/github.com%2F0xdevalias%2Fwordlists","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2F0xdevalias%2Fwordlists/lists"}