SecLists

The collection of security wordlists.

KaliParrotpassive

pkg: seclists

SecLists bundles usernames, passwords, fuzzing payloads, discovery lists and more — the default ammo for most tools.

Syntax

(files under /usr/share/seclists)

Example

ffuf -w /usr/share/seclists/Discovery/Web-Content/common.txt -u https://x/FUZZ

Uses a SecLists wordlist to drive content discovery.

Advantages

Curated lists for everything
Ships with Kali

Disadvantages

Huge — pick wisely
Data, not a tool

Related commands

CeWL

Spider a site to build a custom wordlist.

crunch

Generate custom wordlists by pattern.

Frequently asked questions

What is SecLists used for?

SecLists bundles usernames, passwords, fuzzing payloads, discovery lists and more — the default ammo for most tools.

What is an example SecLists command?

A common example is: ffuf -w /usr/share/seclists/Discovery/Web-Content/common.txt -u https://x/FUZZ — Uses a SecLists wordlist to drive content discovery.

Is SecLists part of Kali Linux?

Yes. SecLists ships with Kali Linux (and Parrot OS). If missing, install it with: sudo apt install seclists.

What category of security tool is SecLists?

SecLists is a Password Attacks tool with a passive-risk profile when run against a live target.

Try recon tools live

Run real scans against a domain you control, stage by stage.

Open the lab →