Download Latest Version 2026.1 source code.tar.gz (710.6 MB)
Email in envelope

Get an email when there's a new version of SecLists

Home / 2026.1
Name Modified Size InfoDownloads / Week
Parent folder
2026.1 source code.tar.gz 2026-03-23 710.6 MB
11 11 weekly downloads
2026.1 source code.zip 2026-03-23 712.2 MB
30 30 weekly downloads
README.md 2026-03-23 3.1 kB
0
Totals: 3 Items   1.4 GB 41

Highlights

:fire: New wordlists

  • :fire: feat(wordlist): Created 2025 most used passwords wordlist (PR [#1263])
  • :fire: feat(wordlist): Added AI ethical and safety boundary testing wordlists (Commit d7400c86)
  • :fire: feat(wordlist): Updated top1million subdomains lists with cloudflare data (PR [#1275])
  • feat(wordlist): Add wordlists for: Kubernetes, Docker, Elasticsearch, Grafana, GitLab, Prometheus (PR [#1293])
  • feat(wordlist): Added OpenWRT discovery wordlist
  • feat(wordlist): Added RSTP camera wordlist
  • feat(wordlist): Added SOfensive LFI wordlist and removed redundant GracefulSecurity wordlist
  • feat(wordlist): Added wordlist for Bluedit CMS
  • feat(wordlist): Added locale-codes wordlist and language-codes wordlist
  • feat(wordlist): Add common.txt in brazilian portuguese (PR [#1279])
  • feat(wordlist): Add more hispanic names (PR [#1290])
  • feat(wordlist): Added list of Brazilian names
  • feat(wordlist): Added polish password wordlist (PR [#1272])
  • feat(wordlist): Added Polish wordlist to Passwords/Common-Credentials/Language-Specific

🌐 Updates to existing wordlists

  • feat(wordlist): Added more API fuzzing endpoints
  • feat(wordlist): Added more entries to "SAP-NetWeaver.txt" (PR [#1255])
  • feat(wordlist): Added more payloads to graphql wordlist (PR [#1294])
  • feat(wordlist): Added more payloads to login_bypass.txt
  • feat(wordlist): Added more payloads to Swagger.txt
  • feat(wordlist): Updated list of Spring endpoints. (PR [#1253])
  • feat(wordlist): Updated list of years in 'quickhits.txt' (PR [#1287])

⚙️ Miscellanous cleanup

This release also includes wordlist cleanup and documentation fixes:

  • chore(wordlist): Added 'regional_' prefix to country codes wordlists
  • chore(wordlist): Classify LFI wordlists by OS
  • chore(wordlist): Moved 'rstp.txt' wordlist from fuzzing to Discovery/Web-Content/Service-Specific
  • chore(wordlist): Re-added JWT secrets from PR [#1235]
  • chore(wordlist): Removed duplicates from login_bypass.txt
  • chore(wordlist): Removed useless wordlist 'der-postillon.txt'
  • chore(wordlist): Renamed Windows LFI wordlist from adeadfed

New Contributors

Full Changelog: https://github.com/danielmiessler/SecLists/compare/2025.3...2026.1

Source: README.md, updated 2026-03-23