Bruteforce Database - Password Dictionaries
A collection of password dictionaries.
Available Dictionaries
- 8-more-passwords.txt: Contains passwords with more than 8 characters. Excludes numeric-only passwords, consecutive characters (3 or more), all-lowercase passwords, and passwords without at least one capital letter and one number. Total: 61,682 passwords.
- 7-more-passwords.txt: Includes passwords with 7 characters or more. Numeric passwords are removed. Total: 528,136 passwords.
- 1000000_password_seclists.txt: A collection of 1,000,000 passwords from SecLists.
- bitcoin-brainwallet.lst: Bitcoin brainwallet with 394,748 entries.
- usernames.txt: Collection of 403,355 usernames from the US.
- us-cities.txt: List of 20,580 cities in the US.
- facebook-firstnames.txt: Contains 4,347,667 first names from Facebook.
- 2151220-passwords.txt: Collection of 2,151,220 passwords from dazzlepod.com.
- subdomains-10000.txt: List of 10,000 subdomains for domain scanning.
- 38650-password-sktorrent.txt: Contains 38,650 passwords from sktorrent.eu.
- uniqpass_v16_password.txt: UNIQPASS is a large password list for use with John the Ripper (JtR) in wordlist mode to convert large numbers of hashes, such as MD5, into cleartext passwords.
- indo-cities.txt: List of 102 cities in Indonesia.
- 38650-username-sktorrent.txt: Contains 38,650 usernames from sktorrent.eu.
- forced-browsing: Contains every wordlist needed for forced browsing.
How to contribute
- Fork the project on Github.
- Create a topic branch for your changes (ex:
add-yahoo-password-list
).
If the project contains a package.json
or a bower.json
file add yourself in the contributors array (or authors
in the case of bower.json
; if the array does not exist, create it):
{
"contributors": [
"Your Name <and@email.address> (http://your.website)"
]
}
Create a pull request on GitHub. These are also a great place to start a conversation around a patch as early as possible.
Contributors
License
This project is licensed under the MIT License