SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Repository Index
47,133 repositories indexed
1–24 of 37 · Most stars
Unofficial Bitwarden compatible server written in Rust, formerly known as bitwarden_rs
- vaultwarden
- bitwarden
- rust
- docker
Test your prompts, agents, and RAGs. Red teaming/pentesting/vulnerability scanning for AI. Compare performance of GPT, Claude, Gemini, DeepSeek, and more. Simple declarative configs with command line and CI/CD integration. Used by OpenAI and Anthropic.
Free cross-platform password manager compatible with KeePass
- keeweb
- keepass
- security
- password-manager
Malicious traffic detection system
Automated ACME SSL certificate generation for nginx-proxy
A community-driven, open-source project to share detection logic, adversary tradecraft and resources to make detection development more efficient.
- threat-hunting
- sysmon
- hunting-campaigns
- hypothesis
SSH server auditing (banner, key exchange, encryption, mac, compression, compatibility, security, etc)
AuthPass - Password Manager based on Flutter for all platforms. Keepass 2.x (KDBX 3 and KDBX 4) compatible.
- flutter
- password-manager
- password-store
- android
Phishing Campaign Toolkit
- king-phisher
- python
- phishing
- security
Search and browse documents and data; find the people and companies you look for.
- python
- data-search
- graph-database
- journalism
Mentalist is a graphical tool for custom wordlist generation. It utilizes common human paradigms for constructing passwords and can output the full wordlist as well as rules compatible with Hashcat and John the Ripper.
- wordlist
- wordlist-generator
- password
- cracking
A One Time Password Authentication package, compatible with Google Authenticator.
- php
- 2fa
- two-factor-authentication
- google2fa
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
- php
- access-control
- audit
- browser-extension
Coherence is a full featured, configurable authentication system for Phoenix
- elixir
- phoenix-framework
- authentication
- hex
Zero Breach — local, read-only scanner that checks a computer for indicators of the AdFection / Candiru ad-delivered spyware campaign. No network, no admin, no dependencies.
- digital-security
- forensics
- incident-response
- ioc
:honey_pot: A fake Django admin login screen page.
- python
- django
Authorization package for Meteor, compatible with built-in accounts packages
- hacktoberfest
- meteor
A KeePass-compatible password and secrets manager for people who work with AI agents.
Elixir encryption library designed for Ecto
- elixir
- encryption
- ecto
- hex
Tool to export Juice Shop challenges and hints in data format compatible with CTFd, RootTheBox or FBCTF
- owasp
- ctf
- ctfd
- application-security
Easily retargetable and hackable interactive disassembler with IDAPython-compatible plugin API
- reverse-engineering
- disassembler
- ida-plugin
- ida
Game Boy ROM disassembler with RGBDS compatible output
- rgbds
- disassembler
- reverse-engineering
- game-boy
POT is an Erlang library for generating Google Authenticator compatible one time passwords
- erlang
- 2fa
- authenticator
- elixir