SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Single-file PHP shell

Webshell && Backdoor Collection

Unofficial MyAnimeList PHP+REST API which provides functions other than the official API

Mellivora is a CTF engine written in PHP

Vulnerable API

Tools and datas related to Bug Bounty.

Damn Vulnerable WordPress

Sample vulnerable code and its exploit code

Codebase for the Sudocrypt v11.0

Platform for Cryptocracy II, an online cryptic hunt.

Lab that will help you to understand how type juggling vulnerability works.

Laravel based application containing the challenge of taking over Admin Panel (docker image & documentation will be available at: https://pentestlabs.gitbook.io/challenges/admin-panel-takeover-i)

Tools and datas related to bug bounty programs.