SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–21 of 21 · Most stars
DNS-Blocklists: For a better internet - keep the internet clean!
- dns
- ads
- blacklist
- blocklist
Loads environment variables from .env for nodejs projects.
- dotenv
- environment-variables
- javascript
- node
Wazuh - The Open Source Security Platform. Unified XDR and SIEM protection for endpoints and cloud workloads.
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
This is the development tree. Production downloads are at:
Authenticated Encryption with Associated Data Algorithms: high-level encryption ciphers
Agent-first reverse engineering for macOS, Windows and Linux: any ACP agent reads, renames and patches binaries, Android apps and GPU kernels next to you.
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
- docker
- images
- selfhosted
- picture
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
- powershell
- golang
- python
- clueless-agents
ClamAV antivirus scanning for Node.js — scan file uploads with a single function call. Zero dependencies. Typed Symbol verdicts. Local or Docker/clamd.
- clamscan
- file-scanner
- virus-scan
- docker-compose
List DTDs and generate XXE payloads using those local DTDs.
- xxe
- dtd
- security
- hacktoberfest
Django web application to store and manage vouchers, coupons, loyalty and gift cards digitally. Supports PWA, offline caching, expiry notifications, transaction histories, file uploads and OIDC SSO.
- coupons
- vouchers
- conventional-commits
- apprise
The universe in numbers. Free, open-source calculators for everything countable.
php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.
- cve
- hestiacp
- opencart
- php
Delphi basic library for validation and authentication of LDAP users in Active Directory.
- activedirectory
- delphi
- adsi
- ldap
Advanced analysis software for APK payloads created by RATs.
- apk
- remoteaccesstrojan
- reverse-engineering
- aapt
Plug that adds various HTTP Headers to make Phoenix/Elixir app more secure
- hex
- plug
- phoenix
- elixir
Modern, profile-based hosts file manager for macOS. Block ads, trackers, and distractions with ease.
- ad-blocker
- dns
- hosts-file
- macos
Go client for Meta's Threads - OAuth 2.0, rate limiting, full API coverage, production-ready
- api-client
- client
- go
- golang