Ranked by Attention Score: stars gained over the last 90 complete days
49 repositories by Attention Score · Aug 6, 2026 – Nov 3, 2026 (UTC)
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Damn Vulnerable Web Application (DVWA)
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Your web application for managing personal data.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
This is a webshell open source project
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Hashtopolis - distributed password cracking with Hashcat
PHP Secure Communications Library
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
ECDH and ECDSA for 8-bit, 32-bit, and 64-bit processors.
PHP Captcha library
🔐 JSON Web Token Authentication for Laravel & Lumen
Easy integration with OAuth 2.0 service providers.
A One Time Password Authentication package, compatible with Google Authenticator.
A simple library to work with JSON Web Token and JSON Web Signature
Laravel Impersonate is a plugin that allows you to authenticate as your users.
PHP library for Two Factor Authentication (TFA / 2FA)
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
Limit access to your Laravel applications by using invite codes
Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast
A static analysis tool for security
JWT authentication for your Symfony API
The most popular PHP library for use with the Twitter OAuth REST API.
A powerful and easy to configure uptime and ssl monitor
Laravel Eloquent roles and abilities.
Handle roles and permissions in your Laravel application
List of Magento extensions with known security issues.
A platform to develop, run and administer CTF competitions. This is the online echoCTF.RED platform source code
Magento 2 GDPR module is a must have extension for the largest e-commerce CMS used in the world. The module helps to be GDPR compliant. Actually it allows the customers to erase, or export their personal data. As a merchant you have powerful tools to customize the extension capabilities and apply the finest privacy rules.
No CAPTCHA reCAPTCHA For Laravel.
Lumen rest api demo with Dingo/Api, JWT, CORS, PHPUNIT
:atom: Social (OAuth1\OAuth2\OpenID\OpenIDConnect) sign with PHP :shipit:
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.