An OTP wordlist theoretically contains all possible combinations of 6-digit numbers. However, unlike user-generated passwords, OTPs are purely numeric and lack human predictability.

: Usually starts at 000000 and ends at 999999 in sequential order, though some specialized lists prioritize "common" codes like 123456 , 111111 , or dates. Where to Find or Generate One

Before you scroll down to the download link, it is crucial to understand what these lists are, how they function in security testing, and the mathematical reality of using them.

SecLists/Fuzzing/6-digits-000000-999999.txt at master - GitHub

Most apps (Google, Instagram, Banks) allow only 3 to 5 failed attempts before locking the account or IP address.