SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
77,353 visible repositories in the index
1–24 of 60 · Most stars
Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
🔐 JSON Web Token Authentication for Laravel & Lumen
- jwt
- laravel
- authentication
- php
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
PHP 5.x support for random_bytes() and random_int()
- php
- php5
- secure
- secure-by-default
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
- misp
- threat-sharing
- threat-hunting
- threatintel
Full-featured Social Engineering Framework with Page Cloning, MITM Proxy, Credential Capture, Session Extraction, and Real-time Monitoring.
- hack
- hacking-tool
- social-engineering
- social-engineering-attacks
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
- password-manager
- passbolt
- security
- cakephp
PHP Secure Communications Library
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
- android
- android-development
- bootloader
- bootloader-unlock
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Your web application for managing personal data.
- dashboard
- dashboards
- manager
- symfony
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
- php
- blade
- laravel
- self-hosted
Simple Encryption in PHP.
Easy integration with OAuth 2.0 service providers.
- php
- oauth2
- oauth
- authorization
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
- scanner
- crawler
- information-gathering
- admin-scanner
Laravel Eloquent roles and abilities.
- laravel
- authorization
- eloquent
- php
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
- php
- social-login
- social-networks
Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.
- information-retrieval
- information-gathering
- termux-tool
- ip-location
Laravel Sanctum provides a featherweight authentication system for SPAs and simple APIs.
Collection of CTF Web challenges I made
JWT authentication for your Symfony API
- symfony
- symfony-bundle
- php
- jwt
Provides a tight integration of the Security component into the Symfony full-stack framework
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.