SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

Which is the fastest web framework?

🔥 Stay motivated and show off your contribution streak! 🌟 Display your total contributions, current streak, and longest streak on your GitHub profile README

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Various webshells. We accept pull requests for additions to this collection.