SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
55,140 visible repositories in the index
1–24 of 25 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
PHP library for Two Factor Authentication (TFA / 2FA)
- qrcode
- php
- two-factor
- twofactorauth
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
- php
- oauth
- social
- oauth-application
Rest API boilerplate for Lumen micro-framework.
Mellivora is a CTF engine written in PHP
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
Validates passwords against PHP's password_hash function using PASSWORD_DEFAULT. Will rehash when needed, and will upgrade legacy passwords with the Upgrade decorator.
Struts Apache 2 based honeypot as well as a detection module for Apache 2 servers
:honey_pot: A simple and effective phpmyadmin honeypot
Bundle allows you to create doctrine entities with fields that will be protected by encryption algorithms such as AES
Two-factor authentication plugin
PHP library to deal with Steam's proprietary TOTP algorithm.