Ranked by Attention Score: stars gained over the last 180 complete days
49 repositories by Attention Score · May 8, 2026 – Nov 3, 2026 (UTC)
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Damn Vulnerable Web Application (DVWA)
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Your web application for managing personal data.
Self-hosted image hosting and sharing platform with private links, collections, S3/SMB storage, OIDC SSO and ShareX support.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
This is a webshell open source project
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
Hashtopolis - distributed password cracking with Hashcat
PHP Secure Communications Library
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
🔐 JSON Web Token Authentication for Laravel & Lumen
Laravel Impersonate is a plugin that allows you to authenticate as your users.
Easy integration with OAuth 2.0 service providers.
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
A One Time Password Authentication package, compatible with Google Authenticator.
PHP Captcha library
A simple library to work with JSON Web Token and JSON Web Signature
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
PHP library for Two Factor Authentication (TFA / 2FA)
The most popular PHP library for use with the Twitter OAuth REST API.
Laravel Eloquent roles and abilities.
JWT authentication for your Symfony API
Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast
List of Magento extensions with known security issues.
No CAPTCHA reCAPTCHA For Laravel.
A powerful and easy to configure uptime and ssl monitor
A static analysis tool for security
Handle roles and permissions in your Laravel application
Laravel Ban simplify blocking and banning Eloquent models.
Until 2018, Backpack v3 used this Base package to offer admin authentication and a blank admin panel using AdminLTE. Backpack v4 no longer uses this package, they're now built-in - use Backpack/CRUD instead.
Authentication for WPGraphQL using JWT (JSON Web Tokens)
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
OAuth client integration for Symfony. Supports both OAuth1.0a and OAuth2.
Lumen rest api demo with Dingo/Api, JWT, CORS, PHPUNIT
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.