{"id":5106,"date":"2019-04-30T16:06:38","date_gmt":"2019-04-30T08:06:38","guid":{"rendered":"https:\/\/www.darknet.org.uk\/?p=5106"},"modified":"2019-04-30T16:07:05","modified_gmt":"2019-04-30T08:07:05","slug":"seclists-usernames-passwords-urls-sensitive-data-patterns-fuzzing-payloads-web-shells","status":"publish","type":"post","link":"https:\/\/www.darknet.org.uk\/2019\/04\/seclists-usernames-passwords-urls-sensitive-data-patterns-fuzzing-payloads-web-shells\/","title":{"rendered":"SecLists &#8211; Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells"},"content":{"rendered":"<p>SecLists is the security tester&#8217;s companion. It&#8217;s a collection of multiple types of lists used during security assessments, collected in one place.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" src=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/04\/SecLists-Usernames-passwords-URLs-sensitive-data-patterns-fuzzing-payloads-web-shells-640x243.png\" alt=\"SecLists - Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells\" width=\"640\" height=\"243\" class=\"aligncenter size-medium wp-image-5137\" srcset=\"https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/04\/SecLists-Usernames-passwords-URLs-sensitive-data-patterns-fuzzing-payloads-web-shells-640x243.png 640w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/04\/SecLists-Usernames-passwords-URLs-sensitive-data-patterns-fuzzing-payloads-web-shells-1024x389.png 1024w, https:\/\/www.darknet.org.uk\/wp-content\/uploads\/2019\/04\/SecLists-Usernames-passwords-URLs-sensitive-data-patterns-fuzzing-payloads-web-shells.png 1165w\" sizes=\"(max-width: 640px) 100vw, 640px\" \/><\/p>\n<script async src=\"https:\/\/pagead2.googlesyndication.com\/pagead\/js\/adsbygoogle.js?client=ca-pub-3033787195489589\"\r\n     crossorigin=\"anonymous\"><\/script>\r\n<!-- Darknet Responsive Post Ad Links [previously link ad unit] -->\r\n<ins class=\"adsbygoogle\"\r\n     style=\"display:block\"\r\n     data-ad-client=\"ca-pub-3033787195489589\"\r\n     data-ad-slot=\"5456620019\"\r\n     data-ad-format=\"auto\"><\/ins>\r\n<script>\r\n     (adsbygoogle = window.adsbygoogle || []).push({});\r\n<\/script>\n<p>List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.<\/p>\n<p>The goal is to enable a security tester to pull this repository onto a new testing box and have access to every type of list that may be needed.<\/p>\n<h2>Contents of SecLists<\/h2>\n<p>Each section has tonnes of content including the below:<\/p>\n<ul>\n<li>Discovery lists (DNS, SNMP, Web content)<\/li>\n<li>Fuzzing Payloads (Databases, LFI, SQLi, XSS)<\/li>\n<li>Password lists (Common credentials, cracked hashes, honeypot captures, leaked lists)<\/li>\n<li>Data Pattern lists<\/li>\n<li>Payload files (Zip bombs, flash, images)<\/li>\n<li>Username lists (Honeypot captures)<\/li>\n<li>Web shells<\/li>\n<\/ul>\n<h2>Install SecLists<\/h2>\n<p><strong>Zip<\/strong><\/p>\n<pre>wget -c https:\/\/github.com\/danielmiessler\/SecLists\/archive\/master.zip -O SecList.zip \\\r\n  && unzip SecList.zip \\\r\n  && rm -f SecList.zip<\/pre>\n<p><strong>Git (Small)<\/strong><\/p>\n<pre>git clone --depth 1 https:\/\/github.com\/danielmiessler\/SecLists.git<\/pre>\n<p><strong>Git (Complete)<\/strong><\/p>\n<pre>git clone git@github.com:danielmiessler\/SecLists.git<\/pre>\n<p>You can access all the lists here:<\/p>\n<p><a href=\"https:\/\/github.com\/danielmiessler\/SecLists\">https:\/\/github.com\/danielmiessler\/SecLists<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>SecLists is the security tester&#8217;s companion. It&#8217;s a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more. The goal is to enable a security tester to pull this repository onto a new testing box [&hellip;]<\/p>\n","protected":false},"author":25,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_seopress_robots_primary_cat":"none","_seopress_titles_title":"SecLists \u2013 Usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells","_seopress_titles_desc":"SecLists is the security tester&#039;s companion. It&#039;s a collection of multiple types of lists used during security assessments, collected in one place.","_seopress_robots_index":"","_genesis_hide_title":false,"_genesis_hide_breadcrumbs":false,"_genesis_hide_singular_image":false,"_genesis_hide_footer_widgets":false,"_genesis_custom_body_class":"","_genesis_custom_post_class":"","_genesis_layout":"","footnotes":""},"categories":[9],"tags":[],"featured_image_src":null,"featured_image_src_square":null,"author_info":{"display_name":"Darknet","author_link":"https:\/\/www.darknet.org.uk\/author\/darknet\/"},"_links":{"self":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5106"}],"collection":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/users\/25"}],"replies":[{"embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/comments?post=5106"}],"version-history":[{"count":0,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/posts\/5106\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/media?parent=5106"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/categories?post=5106"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.darknet.org.uk\/wp-json\/wp\/v2\/tags?post=5106"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}