Stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
An asynchronous event driven PHP socket framework. Supports HTTP, Websocket, SSL and other custom protocols.
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
SQLI labs to test error based, Blind boolean based, Time based.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
A collection of PHP backdoors. For educational or testing purposes only.
WDScanner平台目前实现了如下功能：分布式web漏洞扫描、客户管理、漏洞定期扫描、子域名枚举、端口扫描、网站爬虫、暗链检测、坏链检测、网站指纹搜集、专项漏洞检测、代理搜集及部署等功能。
蓝天采集器是一款开源免费的爬虫系统，仅需点选编辑规则即可采集数据，可运行在本地、虚拟主机或云服务器中，几乎能采集所有类型的网页，无缝对接各类CMS建站程序，免登录实时发布数据，全自动无需人工干预！是网页大数据采集软件中完全跨平台的云端爬虫系统
Detect potentially malicious PHP files
FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.
A PHP proxy script with https and post support
A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
A template configuration without separation on the frontend and backend parts on different domains.
This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is for fun. Just enjoy it \m/
A PHP Based Tool That Helps You To Manage All Your Backdoored Websites Efficiently.
Marfil is an extension of the Aircrack-ng suite, used to assess WiFi network security. It allows to split the work of performing long running dictionary attacks among many computers.