SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 25 · Most stars
Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!
Damn Vulnerable Web Application (DVWA)
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
A curated list of resources for learning about application security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Laravel Eloquent roles and abilities.
Platform-Agnostic Security Tokens
Captcha for Laravel 5+
PHP Captcha library
PHP library for Two Factor Authentication (TFA / 2FA)
Laravel Ban simplify blocking and banning Eloquent models.
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
PHP Secure Headers
A static analysis tool for security
Sample application for Phalcon Framework (Acl, Auth, Security)
List of Magento extensions with known security issues.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance