HAE

awesomephp.io

A website based on the Awesome PHP list

interactive-tutorials

Interactive Tutorials

awesome-appsec

A curated list of resources for learning about application security

awesome-cve-poc

✍️ A curated list of CVE PoCs.

awesome-php

A curated list of amazingly awesome PHP libraries, resources and shiny things.

awesome-security

A collection of awesome software, libraries, documents, books, resources and cools stuffs about security.

Awesome-WAF

🔥 Everything awesome about awesome web-application firewalls (WAF).

awesome-web-security

🐶 A curated list of Web Security materials and resources.

AwesomeSearch

:mag: Search all awesome lists in one second.

bfac

BFAC (Backup File Artifacts Checker): An automated tool that checks for backup artifacts that may disclose the web-application's source code.

BlueLotus_XSSReceiver

XSS平台 CTF工具 Web安全工具

Bug-Hunting-Colab

A Colab For Bug Hunting!

bypass-paywalls-chrome

Bypass Paywalls web browser extension for Chrome and Firefox.

celerystalk

An asynchronous enumeration & vulnerability scanner. Run all the tools on all the hosts.

exploitdb

The official Exploit Database repository

H5SC

HTML5 Security Cheatsheet - A collection of HTML5 related XSS attack vectors

Hacking_Cheat_Sheet

All my Hacking|Pentesting Notes

htaccess

A collection of useful .htaccess snippets.

liffy

Local File Inclusion Exploitation Tool (mirror)

medianest.com

MediaNest Marketing Site

neocities

Neocities.org - the web site. The entire thing. Yep, we're completely open source.

openclassify

OpenClassify is modular and most advanced open source classified platform build with Laravel 8.1 & PHP 8.2 Supported. Included Pyrocms

PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

pentest-book

Red-Teaming-Toolkit

A collection of open source and commercial tools that aid in red team operations.

SecLists

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.

server-status_PWN

A script that monitors and extracts requested URLs and clients connected to the service by exploiting publicly accessible Apache server-status instances.

sse

Server-Sent Events implementation in Go. Used by the Gin Framework.

struts-pwn_CVE-2017-9805

An exploit for Apache Struts CVE-2017-9805

xss-payload-list

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List