danielmiessler / SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
PrivateBin / PrivateBin
A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.
matomo-org / matomo
Empowering People Ethically 🚀 — Matomo is hiring! Join us → https://matomo.org/jobs Matomo is the leading open-source alternative to Google Analytics, giving you complete control and built-in privacy. Easily collect, visualise, and analyse data from websites & apps. Star us on GitHub ⭐️ – Pull Requests welcome!
digininja / DVWA
Damn Vulnerable Web Application (DVWA)
pterodactyl / panel
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
MISP / MISP
MISP (core software) - Open Source Threat Intelligence and Sharing Platform
passbolt / passbolt_api
Passbolt Community Edition (CE) API. The JSON API for the open source password manager for teams!
vimeo / psalm
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
Bubka / 2FAuth
A Web app to manage your Two-Factor Authentication (2FA) accounts and generate their security codes
symfony / security-bundle
Provides a tight integration of the Security component into the Symfony full-stack framework
FriendsOfPHP / security-advisories
A database of PHP security advisories
symfony / security-core
Symfony Security Component - Core Library
Automattic / jetpack
Security, performance, marketing, and design tools — Jetpack is made by WordPress experts to make WP sites safer and faster, and help you grow your traffic.
symfony / security-http
Symfony Security Component - HTTP Integration
tirrenotechnologies / tirreno
tirreno is an open-source framework for building sovereign security, compliance and fraud prevention applications. Detect account takeovers, cyberfraud and business logic abuse inside your product.
webpwnized / mutillidae
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
php-casbin / php-casbin
An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .
nette / latte
☕ Latte: the safest & truly intuitive templates for PHP. Engine for those who want the most secure PHP sites.
leiweibau / Pi.Alert
Scan the devices connected to your WIFI / LAN and alert you the connection of unknown devices. It also warns if a "always connected" device disconnects. In addition, it is possible to check web services for availability. For this purpose HTTP status codes and the response time of the service are evaluated.
laminas / laminas-zendframework-bridge
Alias legacy ZF class names to Laminas Project equivalents.
OpenMage / magento-lts
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
spatie / laravel-csp
Set content security policy headers in a Laravel app
jvoisin / snuffleupagus
Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!
ZishanAdThandar / pentest
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
scheb / 2fa
Two-factor authentication for Symfony applications 🔐
sourcentis / mercator
Mapping the information system / Cartographie du système d'information
darylldoyle / svg-sanitizer
A PHP SVG/XML Sanitizer
aliyun / openapi-sdk-php
The Alibaba Cloud V1.0 SDK will soon enter the Basic Security Maintenance phase and is no longer recommended for use. V2.0 SDK is available here: https://github.com/aliyun/alibabacloud-php-sdk
harutosati / DeFiVaultDiamond
Robust DeFiVaultDiamond Platform that handles Advanced Security Measures, built for everyday use.
gobuildwp / wordpress-mcp-ai-gobuildwp
GoBuildWP (formerly WPPilot): WordPress MCP server & AI agent for ChatGPT, Claude, Cursor, Codex. Build and edit full websites in Elementor and Gutenberg, run SEO, PageSpeed checks, safe updates, backups and security, many sites via GoBuildWP Cloud. Safety profiles, human approval, undo. Free core; Pro adds WooCommerce and more builders.
CodeByPinar / riskops
BT ve siber güvenlik risk yönetimi platformu — risk envanteri, 5×5 değerlendirme, aksiyon takibi ve kurumsal raporlama. PHP 8.3 + MariaDB, framework ve CDN kullanmadan.
toa-sa / The-Holy-Quran
Enhanced and security-hardened edition of Quran for All — developed with permission from the original developer.