33[ ![ CI] ( https://github.com/duyet/bruteforce-database/actions/workflows/validate.yml/badge.svg )] ( https://github.com/duyet/bruteforce-database/actions/workflows/validate.yml )
44[ ![ License: MIT] ( https://img.shields.io/badge/License-MIT-yellow.svg )] ( ./LICENSE )
55
6- A curated, community-maintained collection of wordlists for ** authorized security testing ** , penetration testing, and password analysis.
6+ ![ ] ( http://2.bp.blogspot.com/-DBFErnG-8AE/VhJ-z3Y-41I/AAAAAAAADgA/FGCt8naBMKs/s1600/mtyourmind.10001mb.com.png )
77
8- > ** ⚠️ Ethical Use Only:** These wordlists are for testing systems you own or have explicit authorization to test. See our [ Code of Conduct] ( #ethics--responsible-use ) .
8+ A collection of wordlists for security testing, penetration testing, and password analysis.
9+
10+ > ** Note:** For authorized testing only. Only use on systems you own or have permission to test.
911
1012---
1113
@@ -28,15 +30,15 @@ ffuf -u https://FUZZ.example.com -w subdomains-10000.txt
2830
2931---
3032
31- ## What's Inside?
33+ ## What's Inside
3234
33- ### 📊 Quick Stats
34- - ** 11+ million** total entries across all wordlists
35- - ** 135+ MB** of curated data
36- - ** 4 main categories** : Passwords, Usernames, Infrastructure, Identities
37- - ** Validated & Tested ** with automated CI/CD
35+ ### Stats
36+ - 11+ million total entries
37+ - 135+ MB of data
38+ - 4 main categories: Passwords, Usernames, Infrastructure, Identities
39+ - Validated with automated CI/CD
3840
39- ### 🎯 Use Cases
41+ ### Use Cases
4042
4143| I need to... | Use this wordlist | Why? |
4244| -------------| ------------------| ------|
@@ -53,90 +55,73 @@ ffuf -u https://FUZZ.example.com -w subdomains-10000.txt
5355
5456## Available Wordlists
5557
56- ### 🔑 Password Dictionaries
58+ ### Password Dictionaries
5759
5860#### General Purpose
5961- ** ` 1000000-password-seclists.txt ` ** (1M entries, 8.5 MB)
6062 - Source: [ SecLists] ( https://github.com/danielmiessler/SecLists ) project
61- - Best for: Initial password testing, most common passwords
62- - Quality: ⭐⭐⭐⭐⭐ Industry standard
63+ - Use: Initial password testing, most common passwords
6364
6465- ** ` 2151220-passwords.txt ` ** (2.1M entries, 20 MB)
6566 - Source: Dazzlepod.com compilation
66- - Best for: Comprehensive password testing
67- - Quality: ⭐⭐⭐⭐ Large, diverse dataset
67+ - Use: Comprehensive password testing
6868
6969#### Filtered Sets
7070- ** ` 8-more-passwords.txt ` ** (62K entries, 629 KB)
7171 - Filters: 8+ chars, requires caps + numbers, no consecutive chars
72- - Best for: Testing password policies with complexity requirements
73- - Quality: ⭐⭐⭐⭐ Targeted for modern policies
72+ - Use: Testing password policies with complexity requirements
7473
7574- ** ` 7-more-passwords.txt ` ** (528K entries, 5 MB)
7675 - Filters: 7+ chars, numeric-only removed
77- - Best for: Medium-complexity password policies
78- - Quality: ⭐⭐⭐ Good middle ground
76+ - Use: Medium-complexity password policies
7977
8078#### Specialized
8179- ** ` cain.txt ` ** (307K entries, 2.5 MB)
8280 - Source: Cain & Abel password cracker
83- - Best for: Classic patterns, keyboard walks, common substitutions
84- - Quality: ⭐⭐⭐⭐ Time-tested patterns
81+ - Use: Classic patterns, keyboard walks, common substitutions
8582
8683- ** ` bitcoin-brainwallet.lst ` ** (395K entries, 3.4 MB)
8784 - Source: Dictionary words used for Bitcoin brainwallets
88- - Best for: Passphrase testing, dictionary attack foundations
89- - Quality: ⭐⭐⭐ Unique use case
85+ - Use: Passphrase testing, dictionary attacks
9086
9187- ** ` 38650-password-sktorrent.txt ` ** (39K entries, 309 KB)
9288 - Source: SKTorrent.eu leaked database
93- - Best for: Real-world password patterns
94- - Quality: ⭐⭐⭐ Historical reference
89+ - Use: Real-world password patterns
9590
9691#### Tool-Specific
9792- ** ` uniqpass_v16_password.txt ` ** (2.1M entries, 20 MB)
98- - Optimized for: [ John the Ripper] ( https://www.openwall.com/john/ ) wordlist mode
99- - Best for: Hash cracking with JtR
100- - Quality: ⭐⭐⭐⭐ JtR optimized
93+ - Source: Optimized for [ John the Ripper] ( https://www.openwall.com/john/ )
94+ - Use: Hash cracking with JtR
10195
102- ### 👤 Usernames & Identities
96+ ### Usernames & Identities
10397
10498- ** ` usernames.txt ` ** (403K entries, 3.3 MB)
10599 - Source: US username compilation
106- - Best for: Account enumeration, user testing
107- - Quality: ⭐⭐⭐⭐ Comprehensive US usernames
100+ - Use: Account enumeration, user testing
108101
109102- ** ` 38650-username-sktorrent.txt ` ** (39K entries, 258 KB)
110103 - Source: SKTorrent.eu leaked database
111- - Best for: Real-world username patterns
112- - Quality: ⭐⭐⭐ Historical reference
104+ - Use: Real-world username patterns
113105
114106- ** ` facebook-firstnames.txt ` ** (4.3M entries, 37 MB)
115107 - Source: Facebook public first names
116- - Best for: Name-based password testing, identity research
117- - Quality: ⭐⭐⭐⭐⭐ Massive, real-world dataset
108+ - Use: Name-based password testing
118109
119- ### 🌍 Geographic Data
110+ ### Geographic Data
120111
121112- ** ` us-cities.txt ` ** (21K entries, 199 KB)
122- - All US cities
123- - Best for: Location-based password testing
124- - Quality: ⭐⭐⭐⭐ Complete US coverage
113+ - Use: Location-based password testing
125114
126115- ** ` indo-cities.txt ` ** (102 entries, 1.2 KB)
127- - Indonesian cities
128- - Best for: Regional password testing
129- - Quality: ⭐⭐⭐ Regional coverage
116+ - Use: Regional password testing
130117
131- ### 🌐 Infrastructure Testing
118+ ### Infrastructure Testing
132119
133120- ** ` subdomains-10000.txt ` ** (10K entries, 97 KB)
134- - Most common subdomain names
135- - Best for: Subdomain enumeration, DNS reconnaissance
136- - Quality: ⭐⭐⭐⭐ Essential for recon
121+ - Use: Subdomain enumeration, DNS reconnaissance
137122 - Tools: [ Sublist3r] ( https://github.com/aboul3la/Sublist3r ) , [ ffuf] ( https://github.com/ffuf/ffuf ) , [ gobuster] ( https://github.com/OJ/gobuster )
138123
139- ### 📁 Forced Browsing / Directory Discovery
124+ ### Forced Browsing / Directory Discovery
140125
141126** ` forced-browsing/ ` ** directory contains specialized wordlists for web application testing:
142127
@@ -287,7 +272,7 @@ curl https://api.example.com/check-username -d "username=FUZZ" -w usernames.txt
287272
288273## Automation & Quality
289274
290- This repository includes intelligent automation:
275+ This repository includes automation tools :
291276
292277### Validation Tools
293278
@@ -308,11 +293,11 @@ python3 scripts/deduplicate.py --all
308293### CI/CD Pipeline
309294
310295Every commit and pull request is automatically:
311- - ✅ Validated for encoding and format
312- - ✅ Checked for file corruption
313- - ✅ Scanned for sensitive data
314- - ✅ Analyzed for statistics
315- - ✅ Verified for integrity
296+ - Validated for encoding and format
297+ - Checked for file corruption
298+ - Scanned for sensitive data
299+ - Analyzed for statistics
300+ - Verified for integrity
316301
317302See [ ` .github/workflows/validate.yml ` ] ( .github/workflows/validate.yml )
318303
@@ -353,16 +338,16 @@ python3 scripts/deduplicate.py --all
353338
354339## Ethics & Responsible Use
355340
356- ⚠️ ** IMPORTANT:** These wordlists are for ** authorized security testing only** .
341+ ** IMPORTANT:** These wordlists are for authorized security testing only.
357342
358- ### ✅ Acceptable Use
343+ ### Acceptable Use
359344- Penetration testing with written authorization
360345- Security research on your own systems
361346- Educational purposes in controlled environments
362347- Password policy analysis and improvement
363348- Academic research with ethical approval
364349
365- ### ❌ Unacceptable Use
350+ ### Unacceptable Use
366351- Unauthorized access to any system
367352- Testing systems without explicit permission
368353- Malicious hacking or cybercrime
@@ -377,9 +362,7 @@ See [CLAUDE.md](./CLAUDE.md) for our full philosophy on ethical use.
377362
378363## Project Philosophy
379364
380- This isn't just a collection of text files—it's a ** living archive** maintained by the security community.
381-
382- Read [ CLAUDE.md] ( ./CLAUDE.md ) to understand our principles:
365+ Read [ CLAUDE.md] ( ./CLAUDE.md ) for our principles:
383366- Quality over quantity
384367- Ethical use only
385368- Full transparency
@@ -406,9 +389,9 @@ Want to contribute? See [CONTRIBUTING.md](./CONTRIBUTING.md)!
406389This project is licensed under the [ MIT License] ( ./LICENSE ) .
407390
408391You are free to:
409- - ✅ Use for any purpose (commercial or non-commercial)
410- - ✅ Modify and create derivatives
411- - ✅ Distribute and share
392+ - Use for any purpose (commercial or non-commercial)
393+ - Modify and create derivatives
394+ - Distribute and share
412395
413396Requirements:
414397- Include the license and copyright notice
@@ -420,11 +403,11 @@ Requirements:
420403
421404If you find this project useful:
422405
423- ⭐ ** Star this repository** on GitHub
424- 🐛 ** Report issues** to help us improve
425- 💡 ** Contribute** new wordlists or improvements
426- 📢 ** Share** with the security community
427- ☕ ** Sponsor** via [ GitHub Sponsors] ( https://github.com/sponsors/duyet )
406+ - Star this repository on GitHub
407+ - Report issues to help us improve
408+ - Contribute new wordlists or improvements
409+ - Share with the security community
410+ - Sponsor via [ GitHub Sponsors] ( https://github.com/sponsors/duyet )
428411
429412---
430413
0 commit comments