SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A curated list of resources for learning about application security

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Common PHP webshells you might need for your Penetration Testing assignments or CTF challenges. Do not host the file(s) on your server!

构建并优化高效的渗透 Fuzz 字典，提升网络安全从业人员的渗透测试效率。

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.