SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Top signals
- 1 danielmiessler/SecLists 72.6k
- 2 nextcloud/server 36.3k
- 3 bagisto/bagisto 27.9k
- 4 firefly-iii/firefly-iii 24.2k
- 5 digininja/DVWA 13.5k
Fastest rising
- 1 danielmiessler/SecLists 72.6k
- 2 coollabsio/coolify 58.5k
- 3 nextcloud/server 36.3k
- 4 laravel/framework 34.8k
- 5 filamentphp/filament 31.7k
โ๏ธ Nextcloud server, a safe home for all your data
Free and open source laravel eCommerce platform
Firefly III: a personal finances manager
Leantime is a goals focused project management system for non-project managers. Building with ADHD, Autism, and dyslexia in mind.
PrestaShop is the universal open-source software platform to build your e-commerce solution.
The RSS feed for websites missing it
Pterodactyl® is a free, open-source game server management panel built with PHP, React, and Go. Designed with security in mind, Pterodactyl runs all game servers in isolated Docker containers while exposing a beautiful and intuitive UI to end users.
Wallos: Open-source, self-hostable personal subscription tracker. Visualize your recurring expenses, manage your budget, and save money.
The most advanced frontend drag & drop page builder. Create high-end, pixel perfect websites at record speeds. Any theme, any page, any design.
Speedtest Tracker is a self-hosted application that monitors the performance and uptime of your internet connection.
The most popular open source electronic health records and medical practice management solution.
Kimai is the #1 open-source time-tracking application. From freelancers to companies and organisations - everyone can manage timesheets, generate reports, create invoices and so much more... Web-based multi-user application, available as On-Premise or SaaS version: https://www.kimai.org
A self-hosted web radio management suite, including turnkey installer tools for the full radio software stack and a modern, easy-to-use web app to manage your stations.
Reverse Engineering / Authorized Penetration Testing / Security Research Skill Router Pack AI-powered routing + On-demand toolchain bootstrapping + Self-evolving knowledge base Supports Claude Code, Kiro, Cursor, Cline, and other AI coding clients ้ๅ/ๆธ้/ๅฎๅ จๆ่ฝ่ทฏ็ฑๅ - AI ่ชๅจ่ทฏ็ฑ + ๆ้่ชไธพๅทฅ…
TencentDB Agent Memory is a team-level memory hub for AI Agents — turning conversations, docs, and code into four reusable memory assets (Chat Memory, Skill, LLM-Wiki, Code-Graph) that are governed, shared, and equipped across agents and frameworks.
AirLLM 70B inference with single 4GB GPU
Multiplayer agent harness for work
12 Weeks, 24 Lessons, AI for All!
DeepSeek-native AI coding agent for your terminal. Engineered around prefix-cache stability — leave it running.
WordPress Develop, Git-ified. Synced from git://develop.git.wordpress.org/, including branches and tags! This repository is just a mirror of the WordPress subversion repository. Please include a link to a pre-existing ticket on https://core.trac.wordpress.org/ with every pull request.
21 Lessons, Get Started Building with Generative AI
A 2.78-trillion-parameter Kimi K3 running inference on a single CPU in 8.24 GB of RAM. Portable C99: no BLAS, no framework, no GPU.
Master programming by recreating your favorite technologies from scratch.
Give your AI agent eyes to see the entire internet. Read & search Twitter, Reddit, YouTube, GitHub, Bilibili, XiaoHongShu — one CLI, zero API fees.
Fast Rust library for PDF inspection, classification, and text extraction. Intelligently detects scanned vs text-based PDFs to enable smart routing decisions.
An interactive 3D human anatomy explorer built using threejs with GPT 5.6 Sol
Edit videos with coding agents
Run the full 2.78-trillion-parameter Kimi K3 model beyond available RAM by streaming activated weights directly from NVMe. A dependency-free, embeddable C inference engine.
FDE๏ผๅๆฒฟ้จ็ฝฒๅทฅ็จๅธ๏ผไป้ถๅ ฅ้จๆๅ๏ผๅบไบ่ๅฐใๅข้ฟ้ปๅฎขใๅไนฆๆกๆถ๏ผ
Production-grade Turborepo template for Next.js apps.
๐ฏ All you need. Nothing you don't. Open source project management that works for you, not against you.
An advanced guide which might benefit you a lot ๐ . ไบบ็่ฟ้ถๆๅ ็ฆป่ฐฑ็ไบบ็ ็ฆป่ฐฑ็่ฑ่ฏญๅญฆไน ๆๅ/่ฑ่ฏญๅญฆไน ๆ็จ/่ฑ่ฏญๅญฆไน /ๅญฆ่ฑ่ฏญ
Orchestrate AI agents to find real vulnerabilities in code.
Makes your AI agent think like the laziest senior dev in the room. The best code is the code you never wrote.
access to david ondrej's personal agent skills
Orca is the ADE for working with a fleet of parallel agents. Run any coding agent with your own subscription. Available on desktop, mobile and VPS.
AI agent toolkit: unified LLM API, agent loop, TUI, coding agent CLI
A powerful open-source UI framework for Laravel • Build and ship apps & admin panels fast with Livewire
An assortment of assets that demonstrate features and capabilities of the glTF format
ChurchCRM - A free and open-source Church Management Software (ChMS) to help churches manage their membership data, groups, events, and finances.
A free, self-hostable news aggregator…
A PHP Blogging Platform. Simple and Powerful.
โก Dynamically generated, customizable SVG that gives the appearance of typing and deleting text for use on your profile page, repositories, or website.
A free shopping cart system. OpenCart is an open source PHP-based online e-commerce solution.
SuiteCRM - Open source CRM for the world
High-performance panel based on V2board secondary development supporting new protocols and new features
Open Source Point of Sale is a web based point of sale application written in PHP using CodeIgniter framework. It uses MySQL as the data back end and has a Bootstrap 3 based user interface. If you like this project, please give it a star! Doing so helps maintain Popular OSS status for the project.
The osTicket open source ticketing system official project repository, for versions 1.8 and later
Automatic tab-key completion for Symfony console application options, arguments and parameters
The library used by PKP's applications OJS, OMP and OPS, open source software for scholarly publishing.
Create Symfony Console commands from annotated command class methods.
Apply transformations to structured data to write output in different formats.
Most of the Laravel applications I work on expose REST APIs, and we've been trying to move more of our API testing into the terminal instead of relying on a GUI. The main goal is to use the same workflow locally and in CI/CD. We were looking for a tool that can: Run API tests fr…
It builds up quietly, it doesn't show on any board, and it comes due at the worst possible moment, usually when the technology the team never had time to learn becomes the technology the roadmap now depends on.The same note turns up in audit after audit. A team is building …
Yii DB Migration version 2.1.0 was released. In this version: Add MigrationBuilder::insertBatch() method, deprecate batchInsert() Explicitly import classes, functions, and constants in "use" section Remove unnecessary files from Composer package Remove confirmation prompt from m…
Helllllooooo! Happy August! I hope you had a great week. Mine was WILDLY busy at work, and this weekend was a welcome brain break. But now, break's over, let's learn! Was this forwarded to you? You can subscribe here! Web links of the week CodePen 2.0 React Debugging with Perfor…
Agentimus makes a WordPress site legible to AI assistants and lets them operate it over MCP. Until now it could only tell you what your site publishes. Version 1.33.0 turns the telescope around: it reads what Google, Bing and Cloudflare report back about you, and…
I replaced our Queue/Horizon tier with a database-backed job engine; now stable, feedback welcome Background: I run a fairly large Queue/Horizon implementation (six-figure job counts, multi-host workers, nightly batch DAGs hundreds of jobs wide), and I kept hitting the same arch…
Hi I am pretty new at laravel and is quite impressed with the massive support in terms of tech stack and more. I am a business analyst with some little experience in coding, i have always been a wordpress person but really impressed with the creativity laravel brings. I am worki…
I've been working on Laravel API projects and recently started reviewing our API documentation workflow. Swagger/OpenAPI tools have been useful for generating documentation, but as projects grow, we're looking for a workflow that covers more than just documentation. Some things …
Yii2 Safaricom Daraja Extension ¶ Example Application Compatibility Installation Yii2 Configuration Environment Variables Basic Usage Yii2 MVC Pattern Example Model: STK Push Form Example Controller STK Push and Query C2B URL Registration and Simulation B2C, B2B, and B2Pochi Rev…
Yii Bulma version 1.1.0 was released. In this version: Bump yiisoft/html version to ^4.2.0 Adapt configuration to changes in yiisoft/form Change PHP constraint in composer.json to 8.1 - 8.5 Adopt last change yiisoft/widget Refactor yiisoft/html classes usage Explicitly import co…
Yii2 eCitizen Payment Extension ¶ What This Package Does What This Package Does Not Do Compatibility Installation Yii2 Configuration Environment Variables Yii2 MVC Pattern Basic Checkout Usage Callback URL Building Example Model: Payment Form Example Controller: Checkout Example…
Yii-Permission ¶ Installation Usage Define your own model.conf Learning Casbin License An authorization library for the Yii 3.0 PHP Framework, based on Casbin. Installation Getting Composer package Configuring application Database Migration Usage Quick start Using Enforcer Api U…
Hi everyone! ๐ I've just open-sourced **Laravel Cooldown**, a package for managing **action cooldowns** in Laravel. While Laravel's built-in `RateLimiter` is excellent for request throttling, I found myself repeatedly needing a reusable solution for **time-based action restricti…
Yii2 PHPStan rules Support Installation Configuration Rules at a glance Rule reference A set of PHPStan rules for Yii2 projects that I put together for my own day-to-day work. Yii2 leans heavily on loosely-typed config arrays and magic properties/methods that PHPStan can't see t…
Hey everyone, I recently built an open-source Textile ERP system and wanted to share it with the community here. While this is built entirely in the Next.js ecosystem, I know a lot of us use React/Next.js alongside our typical backend stacks, so I thought it might be of interest…
Been writing Laravel for years. Every time a project pulls me into Node.js territory, whether it's a side project, a microservice, or just helping a team, the first thing I notice is that nothing feels like Eloquent. Prisma is fine but it's a different mental model entirely. Typ…
Yii2 Sentry ¶ Features Installation Configuration Built-in Collectors Usage How Collectors Work Creating a Custom Collector License Read this in other languages: English, ะ ัััะบะธะน Complete Sentry integration for Yii2 framework: logging, tracing and profiling. Features ¶ Tracking …
Hi everyone, I've been building **KAAL Realtime**, a Laravel package that enables **live updates across connected browsers** while letting you continue using standard Blade templates.  method to Button widget Raise yiisoft/html version to ^3.13 || ^4.0 Fix Collapse re-encoding content already managed by Toggler
Voyti — Yii3 User Management Extension ¶ Features Requirements Installation Documentation Testing ะฒะพะนัะธ /vษjหtสฒi/ verb "to enter" or "to log in" Highly customizable and extensible user management, authentication, and authorization extension for Yii Framework 3. Originally ported…
Yii3 reCAPTCHA ¶ Features Requirements Installation Documentation Testing Google reCAPTCHA v2 and v3 form field + server-side validator for Yii3. Stats for Nerds Features ¶ reCAPTCHA v2 — checkbox/invisible widget field with theme, size, and type options reCAPTCHA v3 — score-bas…
If you’re a **Laravel developer**, you know the pain: you finish a feature, but then you spend another 30 minutes updating YAML files or adding messy docblock annotations just so the frontend team knows how the API works. I built **Laravel API Visibility** to change that. No ann…
Hi Guys, Good day! Can you share some real websites using Laravel? And If I have a website, how do I know if there's any tags or signs that shows it's using Laravel? AI tells me to check like this document.cookie.includes('laravel_session') to see if such a cookie...is that true…
Hey everyone! ๐ I recently tried to contribute `Arr::after()` to the Laravel framework (PR #60081) but Taylor decided to keep the framework minimal. So I released it as a standalone package! ## What it does Retrieves the value after a given value in an array. ## Installation ```…
Good evening, everyone! I’m looking for recommendations for libraries or packages to create tables in Laravel using Tailwind CSS. Previously, I used Yajra Laravel DataTables with Bootstrap, but now I want to switch to a solution that works well with Tailwind and, preferably, doe…
I’ve been working on internal approval/workflow systems for years and recently tried extracting the core engine into a reusable Laravel package. Repository: [Approval Binary GitHub Repository](https://github.com/menma977/Approval-Binary) The package started as a simple approval …
I'm currently working on a personal project related to Warhammer. Because I needed to test some things, I have made an test project for a quiz that would help select a faction. But I'm kind of still looking for advise to improve it. At first I had all the faction calculations ru…
I'm using Laravel 13 and accessing my app via ngrok. I noticed that changing APP_URL in my .env file doesn't affect asset() it still generates localhost URLs. After digging in, I found two ways to fix it: 1. Set ASSET_URL to the ngrok URL 2. Add URL::forceRootUrl(config('app.url…
As a trusted [](https://www.nxdeep.com/erp-software-development), NxDeep Connectz creates strong and scalable ERP solutions designed for specific business needs. Our ERP systems bring together essential business processes, remove data silos, and improve operational efficiency th…
Hey Laravel community! I built Pterocos (https://pterocos.eu.org) - a free online editor that runs PHP code entirely in your browser. No installation, no account required. **Why Laravel developers might find this useful:** - Quickly test PHP snippets without local setup - Protot…
Hi everyone, I’ve been running into an issue in queue-heavy Laravel apps where the real origin of a change gets lost. Typical flow: HTTP request → service → queue → job → model update By the time the model is updated, the audit log usually only shows the job or system as the act…
I often need to compare different versions of documentation, website content, configuration snippets, and notes. Git works great for source code, but for plain text I sometimes find it more convenient to use a dedicated comparison tool. I'm interested in learning what other deve…
Hey everyone ๐ I built a small Laravel package for filtering Eloquent models via request query strings, and I'd love to get some feedback from the community. **Package:** https://github.com/AhmedEzz20/laravel-query-filters **Packagist:** https://packagist.org/packages/dev-astro/…
Hey everyone, I recently released the first alpha of **CarvePHP**, an open-source Laravel package for teams working with large Laravel monoliths. The goal is not automatic “one-click microservices.” I know that is not realistic for most real-world systems. Instead, CarvePHP focu…
JWT, JWE, JWS, etc. are terrible designs and need to be scrapped, not resuscitated.
A deep dive into the security engineering decisions that went into CMS Airship. A lot of the decisions we made are subtle.
Application security has a checklist problem; we propose a better way forward.
How to implement field-level data encryption while still allowing fast queries.
Why your software product needs code audits (particularly with cryptography), and how we deliver a higher standard of service.
A quick comparison of libsodium functions with similar names/purposes, and which one to use for a specific use case
How to use Sapient, our new Secure API Toolkit, to Harden your PHP 7 software.
With Chronicle, you probably don't need a blockchain to solve your problems anymore.
A reflection on the first six months of the year, ext/sodium landing in PHP 7.2, and where to go from here.
Ward is our latest security product, intended to help secure e-Commerce platforms.
How to build your own automatic update system that is verifiably secure.
Recent events have put supply chain attacks against software updaters on everyone's radar. Scott explains what this means and what to do about it.
Our new open source library, which keeps your Certificate Authority certificate bundle up-to-date.
Introducing PIE-Hosted Services to Help Further our Goals to Secure the Entire PHP Ecosystem
How to build a homomorphic encryption scheme that is not vulnerable to chosen-ciphertext attacks, using blockchain-like protocols.
Everything a developer needs to know to build secure software in the PHP programming language in the year 2018
Let's solve application security at an ecosystem level by updating outdated and/or insecure blog posts to refer developers to better practices.
Paseto (Platform-Agnostic Security Tokens) is everything JWT should be, but isn't (namely, secure)
Our company's name was decided on March 14, 2015, which makes its birthday very easy to remember.
A deep dive into preventing chosen-ciphertext (e.g. padding oracle) attacks against RSA in custom encrypted transport protocols.
A brief overview of the various common use-cases of asymmetric cryptography (also known as "public-key cryptography") from the perspective of a software developer.
If you're planning on implementing the W3C and FIDO Alliance's new WebAuthn standard for hardware security token support, skip ECDAA for now.
Paragon Initiative Enterprises answers several reader questions
We have a lot of work ahead of us in 2019, and we hope it benefits the entire PHP community
CipherSweet is a PHP library that provides searchable encryption for the most common cases a web developer is likely to encounter.
A simple, accessible recommendation for key sizes and recommended algorithms for various cryptographic algorithms.
We wrote a cryptography library entirely in PHP to make your WordPress site secure against supply-chain attacks.
Your webserver can initiate HTTP requests too, and securing those matters a lot.
We'll be doing for JavaScript (Node.js) what we've been doing for PHP for several years now.
Why versioned protocols are superior to "cipher agility"-based cryptographic designs.
Introducing Ristretto255 for PHP developers
Announcing new versions of the PASETO protocol, which offer better arguments for security in a wider range of use cases.
PASERK adds public-key encryption, key-wrapping, key serialization, and unique key identification to PASETO.
How we plan to discourage insecure implementations of PASETO.
Our project, Gossamer, is the best first step to solving supply chain security for the PHP ecosystem.
A short summary of the work we've done to make the Internet more secure for everyone.
Your PHP 5 code won't break, but your PHP 8.1+ code will be faster and cleaner
Leveraging the ubiquity of the PHP programming language to make everyone more secure.
Announcing a PHP extension and pure-PHP polyfill providing post-quantum cryptography for the PHP open source software community.
Introduction Installation Quick Setup Core Features Best Practices Common Patterns Troubleshooting Additional Resources Conclusion Introduction ¶Inertia.js is a modern approach to building single-page applications (SPAs) without the complexity of building an API. It allows you t…
yii2-recurring-date ¶ Main Features Installation Usage JSON Format (persisted) Calculation of the Next Expiration Date Configuration and Customization Validations and UX Behavior Internationalization (i18n) Tests Best Practices and Notes Contributing License A Yii2 extension/wid…
ChartJs Widget ¶ Installation Usage Further Information Contributing Credits License Este paquete es un fork de 2amigos/yii2-chartjs-widget, el cual se encuentra en modo de solo lectura. Este fork fue creado para mantener vivo el paquete y continuar su mantenimiento. Renders a C…
Yii2 IDE Helper ¶ ๅ่ฝ็นๆง ๅฎ่ฃ ไฝฟ็จ PhpStorm Meta ๆไปถ่ฏฆ่งฃ PhpStorm ้ ็ฝฎ ็ๆๆไปถ็คบไพ ๆต่ฏ ่ดก็ฎ ่ฎธๅฏ่ฏ ่ด่ฐข ไธบ Yii2 ๆกๆถๆไพ PhpStorm ๆบ่ฝไปฃ็ ่กฅๅ จๆฏๆ๏ผ็ตๆๆฅๆบไบ barryvdh/laravel-ide-helper ๅ่ฝ็นๆง ¶ โ ไธบ Yii2 ็ปไปถ็ๆๅฎๆด็ PHPDoc ็ฑปๅๆ็คบ โ ไธบ ActiveRecord ๆจกๅ็ๆๅฑๆงๅๆนๆณๆๆกฃ โ ไธบ ActiveQuery ็ๆๆฅ่ฏขๆๅปบๅจๆ็คบ โ ็ๆ PhpStorm Meta ๆไปถๆฏๆ้ซ็บง IDE ็นๆง๏ผDI ๅฎนๅจใ็ฑปๅๆจๆญ๏ผ…
Response download version 1.1.0 was released. In this version: Add support for psr/http-message version ^2.0 Try to determine content MIME type automatically
Both web template and API template got 1.4.0 release which adds expicit Caddyfile configs for production and development Docker environments. These configs are in docker/Caddyfile for production image and docker/dev/Caddyfile for development image. After these are edited you nee…
First stable version of FrankenPHP worker runner released. The runner allows using FrankenPHP in worker mode. In this mode application is initializer once per worker and is serving multiple reqests in this state resulting in signficiant performance gains. Since the application d…
Yii Log Email Target version 4.2.0 was released. In this version: Change PHP constraint in composer.json to 8.1 - 8.5 Raise the minimum yiisoft/mailer version to ^6.0 and adapt the code accordingly Explicitly import classes in "use" section
We are pleased to announce the release of Yii Framework version 2.0.55. Please refer to the instructions at https://www.yiiframework.com/download/ to install or upgrade to this version. In this release: Security fix for CVE-2026-39850: internal variables in View::renderPhpFile()…
Yii RBAC PHP File Storage version 2.1.0 was released. In this version: Change PHP constraint in composer.json to 8.1 - 8.5 Bump yiisoft/rbac version to ^2.1 Apply code style fixes Explicitly import functions and constants in "use" section
Yii Active Record version 1.1.0 was released. In this version: Clarify $relations parameter type in JoinWith::__construct() from array<string|Closure> to array<string|callable(ActiveQueryInterface):void> Optimize performance of ActiveRecord::get() method Remove check…
Yii HTML version 4.1.0 was released. In this version: Add test helper functions for controlling HTML ID generation
Yii Runner RoadRunner version 3.2.0 was released. In this version: Add PHP 8.5 support Add spiral/roadrunner-http version ^v4.0.0 support
Yii HTML version 4.2.0 was released. In this version: Add beforeInput() and afterInput() methods to abstract BooleanInputTag, extended by Radio and Checkbox Add beforeCheckbox() and afterCheckbox() methods to CheckboxList, and beforeRadio() and afterRadio() methods to RadioList