Gives you curated password lists from SecLists for authorized security testing without downloading the full 4.5GB repository. You get five essential wordlists under 10MB total: the 500 worst passwords, 10k and 100k most common, a 10k darkweb breach compilation, and 12k probable passwords. Use it for password spraying, credential testing, or validating password policies during pentests, bug bounties, or CTFs. The files are plain text and easy to iterate through in Python or any scripting language. Only use this with explicit authorization or on systems you own. It's a practical grab if you need password testing capabilities without the bloat of the full SecLists collection.

skills.sh installs
591
GitHub stars
400
last updated
Jun 8, 2026

Install

$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-passwords --agent claude-code

Installs into .claude/skills of the current project.

Files

SecLists Passwords (Curated)

Description

Top password lists for authorized security testing: common passwords, darkweb leaks, worst passwords. Curated essentials (<10MB).

Source: SecLists/Passwords Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • Password spraying (authorized)
  • Credential testing
  • Password policy validation
  • Brute force testing (authorized)
  • Authentication testing

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • 500-worst-passwords.txt - 500 worst passwords
  • 10k-most-common.txt - 10K common passwords
  • 100k-most-used-passwords-NCSC.txt - 100K passwords
  • darkweb2017_top-10000.txt - 10K from breaches
  • probable-v2_top-12000.txt - 12K probable passwords

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Passwords"

Sponsors

Details

Repository
github.com/eyadkelleh/awesome-skills-security
Categories
Testing & QA, Security
First seen
Jun 11, 2026

More from eyadkelleh/awesome-skills-security

All 7
1aj-geddes avatardatabase-backup-restoreaj-geddes/useful-ai-promptsImplement backup and restore strategies for disaster recovery. Use when creating backup plans, testing restore procedures, or setting up automated backups.588skills.sh installs
2pedronauck avatarno-workaroundspedronauck/skillsFix problems at their root cause instead of patching symptoms. Use when debugging, fixing bugs, resolving test failures, planning a solution, or reviewing a cha584skills.sh installs
3bobmatnyc avatarfastifybobmatnyc/claude-mpm-skillsProduction Fastify (TypeScript) patterns: schema validation, plugins, typed routes, error handling, security hardening, logging, testing with inject, and gracef582skills.sh installs
4eyadkelleh avatarsecurity-webshellseyadkelleh/awesome-skills-securityWeb shell samples for detection and analysis: PHP, ASP, ASPX, JSP, Python, Perl shells. Use for security research and detection system testing.580skills.sh installs
5new-silvermoon avatarandroid-emulator-skillnew-silvermoon/awesome-android-agent-skillsProduction-ready scripts for Android app testing, building, and automation. Provides semantic UI navigation, build automation, log monitoring, and emulator life578skills.sh installs
6jshchnz avatarschedulerjshchnz/claude-code-schedulerSchedules Claude Code tasks to run automatically at specific times using native OS schedulers (launchd on macOS, crontab on Linux, Task Scheduler on Windows). H574skills.sh installs