Skip to content
View PwnSecc's full-sized avatar

Block or report PwnSecc

Block user

Prevent this user from interacting with your repositories and sending you notifications. Learn more about blocking users.

You must be logged in to block users.

Maximum 250 characters. Please don't include any personal information such as legal names or email addresses. Markdown supported. This note will be visible to only you.
Report abuse

Contact GitHub support about this user’s behavior. Learn more about reporting abuse.

Report abuse
58 stars written in PHP
Clear filter

SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

PHP 67,609 24,821 Updated Dec 17, 2025

A full-stack framework for Laravel that takes the pain out of building dynamic UIs.

PHP 23,313 1,679 Updated Dec 17, 2025

Damn Vulnerable Web Application (DVWA)

PHP 12,326 4,453 Updated Dec 12, 2025

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

PHP 6,047 1,538 Updated Dec 16, 2025

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

PHP 3,683 538 Updated Sep 29, 2025

🔥 Powerful, yet easy to use, open-source online ordering, table reservation and management system for restaurants

PHP 3,358 1,110 Updated Sep 12, 2025

Track any ip address with IP-Tracer. IP-Tracer is developed for Linux and Termux. you can retrieve any ip address information using IP-Tracer.

PHP 2,709 495 Updated Sep 21, 2024

Single-file PHP shell

PHP 2,649 680 Updated Aug 11, 2025

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspber…

PHP 2,255 504 Updated Dec 18, 2021

Hashtopolis - distributed password cracking with Hashcat

PHP 1,679 246 Updated Dec 17, 2025

An open source computer cloning & management system

PHP 1,454 259 Updated Dec 15, 2025

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

PHP 1,391 256 Updated Jan 9, 2024

Twitter vulnerable snippets

PHP 1,080 195 Updated Mar 17, 2025

A laboratory for learning secure web and mobile development in a practical manner.

PHP 970 463 Updated Sep 25, 2024

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

PHP 912 188 Updated Dec 2, 2025

DoraBox - Basic Web Vulnerability Training

PHP 802 183 Updated Jul 15, 2023

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

PHP 736 111 Updated May 6, 2024

Exploitation for XSS

PHP 729 161 Updated Aug 5, 2021

Indicators from Unit 42 Public Reports

PHP 728 153 Updated Aug 17, 2025

Some of my exploits.

PHP 594 162 Updated Feb 25, 2021

365-Stealer is a phishing simualtion tool written in python3. It can be used to execute Illicit Consent Grant Attack.

PHP 558 101 Updated Jun 27, 2025

PHP Runtime Vulnerability Detection

PHP 483 69 Updated May 25, 2019

The Magical Code Injection Rainbow! MCIR is a framework for building configurable vulnerability testbeds. MCIR is also a collection of configurable vulnerability testbeds.

PHP 446 155 Updated Aug 7, 2020

DejaVU - Open Source Deception Framework

PHP 423 97 Updated Aug 2, 2025

CMS auto detect and exploit.

PHP 416 115 Updated Apr 23, 2022

a simple tool to detect potential security threat in php code

PHP 315 19 Updated Sep 9, 2024

WPHunter A Wordpress Vulnerability Scanner

PHP 169 48 Updated Mar 23, 2018

[BHUSA 2018 Arsenal] Integrated tool to analyze Drive-by Download attack

PHP 107 17 Updated Jan 6, 2023

Cheap & Nasty Wordpress Command Execution Shell

PHP 92 50 Updated May 10, 2019
Next