SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Damn Vulnerable Web Application (DVWA)

This is a webshell open source project

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Damn Vulnerable WordPress

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Exploit to trigger RCE for CVE-2018-16763 on FuelCMS <= 1.4.1 and interactive shell.