SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

This is a webshell open source project

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

This repository contains some challenges made to the understanding of how exploit some scenarios where there are security vulnerabilities and help to think about how to mitigate them =)