SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Damn Vulnerable Web Application (DVWA)

GitHub最全的前端资源汇总仓库（包括前端学习、开发资源、求职面试等）

Platform-Agnostic Security Tokens

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

High performance HTTP proxy originally written by your friends at Lantern and now maintained by a stellar group of volunteer open source programmers.

Use wealthbot.io to easily setup your own wealth management platform ⛺

A ready to use JSONP endpoints/payloads to help bypass content security policy (CSP) of different websites.

Asynchronous, non-blocking I/O, event based PHP library for writing custom TCP/IP client and server implementations. From it's previous versions, library inherits a full blown stable support for XM…

Basic guide to harden systemd services

UTM Firewall on OpenBSD

Whitebox source code review cheatsheet (Based on AWAE syllabus)

[READ ONLY] Subtree split of the SocialiteProviders/Instagram Provider (see SocialiteProviders/Providers)

Snyk PHP Goof - A vulnerable PHP demo application

skeleton solution and test cases for comparing iterative and incremental approaches

Social Lab is NOT a real social network. It is a social engineering wargame.