duyet/bruteforce-database resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1726 stars · 606 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of wordlists (11+ million entries) for password cracking, username enumeration, subdomain discovery, and web path brute-forcing during authorized security testing. It is a plain-text data repository validated by CI, usable with tools like Hydra, John the Ripper, Gobuster, and ffuf.

Use cases

• find common passwords for a pentest engagement
• wordlist for hydra ssh brute force
• enumerate subdomains with ffuf
• discover hidden web directories with gobuster
• test password policy complexity requirements
• generate wordlists for john the ripper
• enumerate common usernames on a system

When to choose

• you need ready-made password or username wordlists for authorized penetration testing
• you want curated lists filtered by password policy rules
• you need subdomain or forced-browsing lists for web reconnaissance

When to avoid

• you need a cracking tool itself rather than wordlist data
• your use case is not authorized security testing
• you need programmatically generated or rule-based wordlist mutation rather than static lists

Facets

dataset · maturity active

security penetration-testing data-generation security penetration-testing developer-tools cross-platform cli wordlists password-dictionaries brute-force seclists ethical-hacking subdomain-enumeration forced-browsing

Member repositories

For agents

markdown · JSON · MCP: product_card(name="duyet/bruteforce-database")