Repository Index

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.

• laravel
• opensource
• mit
• docker

Automated ACME SSL certificate generation for nginx-proxy

• nginx-proxy
• letsencrypt
• docker
• ssl

OpenID Certified™ OAuth 2.0 Authorization Server implementation for Node.js

• openid
• oidc
• openid-provider
• openid-connect

Platform for Architecture-Neutral Dynamic Analysis

• reverse-engineering
• dynamic-analysis
• qemu
• pandare

Global edition of ARTEX — an LLM multi-agent autonomous penetration-testing framework. English default, switchable to Korean/Chinese/Spanish/Japanese. For authorized, defensive and detection use only. (upstream: Autumn-27/ARTEX, AGPL-3.0)

• ai-agent
• autonomous-agents
• blue-team
• cybersecurity

Search and browse documents and data; find the people and companies you look for.

• python
• data-search
• graph-database
• journalism

OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oidc
• openid
• openid-client
• openid-connect

Handle roles and permissions in your Laravel application

• laratrust
• laravel
• roles
• authorization

Customizable Linux Persistence Tool for Security Research and Detection Engineering.

• bash
• linux
• persistence
• backdoor

Low-Level OAuth 2 / OpenID Connect Client API for JavaScript Runtimes

• oauth2
• openid
• openid-connect
• oidc

Built-in Panther detection rules and policies

• security
• python
• cybersecurity
• siem

large hashcat rulesets generated from real-world compromised passwords

• hashcat
• hashcat-rules
• password-cracking
• security-research

A surprisingly configurable convention-based approach to managing your application's custom configuration settings.

php2shell (CVE-2026-109618 & CVE-2026-109619) security patches for EOL PHP 5.4–8.1. Official & enhanced backports for vanilla php.net and Remi Collet trees. Restores safe file uploads & progress bars without RCE. Fleet-tested on OpenCart, WordPress, HestiaCP, aaPanel.

• cve
• hestiacp
• opencart
• php

Deprecated repo for PANDA 1.0 – see PANDA 2.0 repository

HOTP/TOTP one time passwords on java phones (J2ME)

• hotp
• j2me
• j2me-platform
• one-time-pad

Fast incident overview