SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

This is a webshell open source project

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

MISP (core software) - Open Source Threat Intelligence and Sharing Platform

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

PHP Secure Configuration Checker

Secure Content Management for the Modern Web - "The sky is only the beginning"

CryptOMG is a configurable CTF style test bed that highlights common flaws in cryptographic implementations.

XBOW Validation Benchmarks

PHP library to parse, build and validate SPF (Sender Policy Framework) DNS records

Custom slash command to do a basic nmap scan from within Slack

Custom slash command to do a basic dnsrecon from within Slack

Custom slash command to find all a domains A records from within Slack

It's a javascript project to set up trap for people who want to find web application vulnerability on your system.

Custom slash command to do ipinfo.io lookups from within Slack

Custom slash command to do censys.io IP lookups from within Slack