SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Damn Vulnerable Web Application (DVWA)

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

SQLI labs to test error based, Blind boolean based, Time based.

All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers

Collection of CTF Web challenges I made

A collection of PHP backdoors. For educational or testing purposes only.

FruityWiFi is a wireless network auditing tool. The application can be installed in any Debian based system (Jessie) adding the extra packages. Tested in Debian, Kali Linux, Kali Linux ARM (Raspber…

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

Ruby on Rails Phishing Framework

PHP Secure Configuration Checker

Advanced Web Shell

Nano is a family of PHP web shells which are code golfed for stealth.

CMS auto detect and exploit.

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

PowerShell Empire Web Interface

RIPS - A static source code analyser for vulnerabilities in PHP scripts

Clear all your logs in [linux/windows] servers 🛡️

B4TM4N ~ PHP WEBSHELL

Create your own social network for free with Wallstant social network, easy to install and fast to use .. Make people connected

A web interface to automate Scanning, Generating metasploit payload, Network Testing,Exploring CMS,Information Gathering and much more

OWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web using the web as well as pentest on the go through its responsiv…

This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/

Web Application Vulnerability Scanner.

CookieCatcher

Bug7sec Team - ransomware open source (web)

Search exploits in multiple exploit databases!

Vulnerable OTP/2FA Application written in PHP using Google Authenticator

A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any year or complete list of all years possible. Made Specially for…