SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
72,862 visible repositories in the index
1–24 of 49 · Most stars
🔐 JSON Web Token Authentication for Laravel & Lumen
- jwt
- laravel
- authentication
- php
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
A spec compliant, secure by default PHP OAuth 2.0 Server
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
Simple Encryption in PHP.
Easy integration with OAuth 2.0 service providers.
- php
- oauth2
- oauth
- authorization
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Laravel Passport provides OAuth2 server support to Laravel.
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
- php
- social-login
- social-networks
Provides user management for your Symfony project. Compatible with Doctrine ORM & ODM, and custom storages.
- symfony
- symfony-bundle
- user-management
- php
Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
- information-retrieval
- information-gathering
- termux-tool
- ip-location
Laravel Sanctum provides a featherweight authentication system for SPAs and simple APIs.
Lets you find a path to the system CA bundle, and includes a fallback to the Mozilla CA bundle.
Collection of CTF Web challenges I made
Provides a tight integration of the Security component into the Symfony full-stack framework
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php