What is a combolist?
A combolist is a text file containing a list of usernames and passwords in a consistent format. Combolists are meant to be machine-readable so they can be used as input to tools that will automate authentication requests to a website or API.
A common example would be credential stuffing attacks. A tool like SentryMBA, an account checker, would use a combolist to automatically check which accounts are valid for a site. Once these accounts have been validated then they will be subject to a full account takeover and, inevitably, some sort of fraud.
How to use?
If you’re a beginner then simply search on Youtube, there are a bunch of videos that explain how to use, else, the pros knows how to grab and let the deal get done