SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–17 of 17 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
Platform-Agnostic Security Tokens
- php
- paseto
- paseto-tokens
Captcha for Laravel 5+
PHP Captcha library
PHP library for Two Factor Authentication (TFA / 2FA)
- qrcode
- php
- two-factor
- twofactorauth
Laravel Ban simplify blocking and banning Eloquent models.
- laravel
- eloquent
- cog
- trait
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
List of Magento extensions with known security issues.
- magento
- extensions
- vulnerability
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
- ctf
- echoctf
- cybersecurity
- hacking
WebDecoy Bot Detection — zero-config WordPress plugin for bot protection, spam prevention, and WooCommerce carding defense
- anti-spam
- bot-detection
- php
- security