SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
76,855 visible repositories in the index
1–24 of 47 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
Anonymous email forwarding
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
Tailwind scaffolding for the Laravel framework.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
A library for implementing an OAuth2 Server in php
Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
- information-retrieval
- information-gathering
- termux-tool
- ip-location
Single-file PHP shell
- php-shell
- pentesting
Collection of CTF Web challenges I made
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
PHP class to generate and verify Google Authenticator 2-factor authentication
FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
A collection of PHP backdoors. For educational or testing purposes only.
- php
- php-backdoor
- webshell
Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!