SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Bypassing disabled exec functions in PHP (c) CRLF

PoC presented at SOCON-2025 demonstrating the ability to bypass Office documents sandbox using specifically crafted macro