SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
86,076 visible repositories in the index
1–24 of 30 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
The most popular PHP library for use with the Twitter OAuth REST API.
- twitter-oauth
- php
- twitter-api
- php-library
Tailwind scaffolding for the Laravel framework.
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Provides a tight integration of the Security component into the Symfony full-stack framework
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
Handle roles and permissions in your Laravel application
- laratrust
- laravel
- roles
- authorization
AWSGoat : A Damn Vulnerable AWS Infrastructure
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
PHP Captcha library
JSON Object Signing and Encryption library for PHP.
Multi-provider authentication framework for PHP
tirreno is an open-source framework for in-house security. Event tracking, risk scoring and threat detection for your system.
- fraud-detection
- intelligence
- antispam
- fraud
A framework agnostic authentication & authorization system.
- php
- cartalyst
- sentinel
- authentication
[DEPRECATED] A framework agnostic authentication & authorization system.
FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
- php
- oauth
- social
- oauth-application
Rest API boilerplate for Lumen micro-framework.
Mellivora is a CTF engine written in PHP
A simple PHP Authentication that enables steam users to log into their steam account to access content!