Where Does Kali Linux Keep Wordlists?
Kali keeps its famous wordlists in /usr/share/wordlists (rockyou.txt.gz lives there), with tool configs scattered per tool and wordlist symlinks managed by wordlists package.
Last updated
Kali is Debian with a tool collection, and the one path everyone asks about is wordlists. They live in /usr/share/wordlists with rockyou.txt.gz as the famous entry. The directory also holds SecLists and dirbuster lists that many tutorials assume you already have.
Tool configs have no shared home. Each package keeps its own files in standard Debian spots, so ask per tool rather than per distro. The wordlists folder is the exception that earned this post: nearly every password tutorial points at it within minutes.
Where Kali Linux stores this, by platform
/usr/share/wordlists
rockyou.txt.gz plus SecLists and others ship here. Decompress before use with tools that need plain text. Copy out personal variants so package updates never clobber your edits.
Frequently asked questions
How do I use rockyou.txt?
Decompress it first with gunzip since it ships gzipped, and many tools accept the gz directly too. Copy it before editing so updates can replace the original cleanly. Wordlist choice matters more than tool flags for most cracking tasks.
Where are the other bundled wordlists?
Check /usr/share/wordlists for seclists, dirbuster, and wfuzz lists that ship with Kali. Metasploit data sits under /usr/share/metasploit-framework. Each tool documents its own config path, there is no single Kali config folder.
Notice an outdated path? Let us know.