Stardustsky/SaiDict resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1219 stars · 270 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of attack dictionaries for penetration testing, including weak passwords, common usernames, sensitive directory and file name lists, and injection fuzzing payloads. It is organized into categories such as account credentials, middleware and service default passwords, and webshell passwords.

Use cases

• brute forcing weak passwords on ssh, mysql, ftp, and remote desktop services
• directory and file brute forcing to find sensitive files like backups, archives, and source code
• fuzzing web applications for sql injection, xss, xxe, and ldap injection payloads
• testing default credentials on middleware like tomcat, weblogic, and zabbix
• guessing webshell passwords during authorized penetration tests

When to choose

• you need a comprehensive Chinese-language-oriented wordlist collection for penetration testing
• you want ready-made dictionaries for common services, middleware, and sensitive file discovery
• you are doing authorized security assessments and need credential and fuzzing wordlists

When to avoid

• you need actively maintained wordlists with recent updates
• you require a tool that automates attacks rather than raw wordlist data
• your target environment is unrelated to the Chinese web ecosystem covered by many entries

Facets

dataset · maturity maintenance

penetration-testing security fuzzing security penetration-testing developer-tools cross-platform wordlist dictionary brute-force fuzzing-dictionaries weak-passwords sensitive-files dirbusting

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Stardustsky/SaiDict")