mirror of
https://github.com/danielmiessler/SecLists.git
synced 2025-06-08 05:57:52 +00:00

This wordlist contains some commonly used passwords that can be found in O365, OWA, and Active Directory environments. They are oriented toward password spraying once the tester gets hold of a list of valid email addresses. The wordlist can be easily modified (e.g testers can change the COMPANY SPORTS_TEAM/HOBBY, LOCATION, and DEPARTMENT values to match their current target).
The Passwords directory will hold a number of password lists that can be used by multiple tools when attempting to guess credentials for a given targeted service. This will include a number of very popular lists in cooperation with their maintainers, including the RockYou lists maintained by Rob Bowes.
- Password lists containing the count are located in the "withcount" folder.
- Lists over 100Mb have been compressed.
scraped-JWT-secrets.txt
This wordlist is from https://github.com/wallarm/jwt-secrets
Some passwords lists are +100MB and can't be stored on the repository. The following are external links to download more:
- Breach compilation (original link recovered)
- Weekpass