Ranked by Attention Score: stars gained over the last 30 complete days
37 repositories by Attention Score · Oct 5, 2026 – Nov 3, 2026 (UTC)
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Damn Vulnerable Web Application (DVWA)
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
LinkStack - the ultimate solution for creating a personalized & professional profile page. Showcase all your important links in one place, forget the limitation of one link on social media. Set up your personal site on your own server with just a few clicks.
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
Your web application for managing personal data.
Manage your photos with Piwigo, a full featured open source photo gallery application for the web. Star us on Github! More than 200 plugins and themes available. Join us and contribute!
Self-hosted image hosting and sharing platform with private links, collections, S3/SMB storage, OIDC SSO and ShareX support.
Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
Hashtopolis - distributed password cracking with Hashcat
This is a webshell open source project
PHP Secure Communications Library
Official repository for Open Web Analytics which is an open source alternative to commercial tools such as Google Analytics. Stay in control of the data you collect about the use of your website or app. Please consider sponsoring this project.
Privacy-friendly, open-source analytics for WordPress — GDPR compliant, cookieless, and fast
🔐 JSON Web Token Authentication for Laravel & Lumen
A simple library to work with JSON Web Token and JSON Web Signature
PHP Captcha library
A One Time Password Authentication package, compatible with Google Authenticator.
PHP library for Two Factor Authentication (TFA / 2FA)
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
Laravel wrapper around OAuth 1 & OAuth 2 libraries.
The most popular PHP library for use with the Twitter OAuth REST API.
:camera: PictShare is an open source image, mp4, pastebin hosting service with a simple resizing and upload API that you can host yourself. :rice_scene:
A powerful and easy to configure uptime and ssl monitor
A static analysis tool for security
Easy integration with OAuth 2.0 service providers.
Laravel Eloquent roles and abilities.
List of Magento extensions with known security issues.
CakePHP TinyAuth plugin for an easy and fast user authentication and authorization. Single or multi role. DB or config file based.