SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
81,588 visible repositories in the index
1–24 of 85 · Most stars
🔐 JSON Web Token Authentication for Laravel & Lumen
- jwt
- laravel
- authentication
- php
This is a webshell open source project
- webshell
- webshell-sniper
- php
- jsp
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
A simple library to work with JSON Web Token and JSON Web Signature
- php
- jwt
- tokens
- hacktoberfest
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
Role-based Permissions for Laravel 5
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Simple Encryption in PHP.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Easy integration with OAuth 2.0 service providers.
- php
- oauth2
- oauth
- authorization
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
Platform-Agnostic Security Tokens
- php
- paseto
- paseto-tokens
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
- php
- social-login
- social-networks
A library for implementing an OAuth2 Server in php