SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
76,855 visible repositories in the index
1–24 of 24 · Most stars
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
- self-hosted
- self-hosting
- pastebin
- security
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
- php
- hashids
- database-ids
- php-library
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
Tailwind scaffolding for the Laravel framework.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
JWT authentication for your Symfony API
- symfony
- symfony-bundle
- php
- jwt
Provides a tight integration of the Security component into the Symfony full-stack framework
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
- payload
- xss
- blind
- php
PHP class to generate and verify Google Authenticator 2-factor authentication
FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspberry Pi), Raspbian (Raspberry Pi), Pwnpi (Raspberry Pi), Bugtraq, NetHunter.
A database of PHP security advisories
- composer
- packagist
- php
- vulnerabilities
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
A Laravel 5.8 API Boilerplate to create a ready-to-use REST API in seconds.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
- php
- php-codesniffer
- phpcs
- static-code-analysis
Rest API boilerplate for Lumen micro-framework.
Provides a unified interface to local and remote authentication systems.
- aura
- authentication
- authenticator
- login
Inserts a trap for spam bots into responses.
- php
- middleware
- honeypot
- stack
PHP library to deal with Steam's proprietary TOTP algorithm.
A simple PHP Steam login and User Detail package
- php
- composer
- steam
- steam-api
python based WordPress honeypot in a docker container