This is a collection of tutorials for learning how to use Docker with various tools. Contributions welcome.

Damn Vulnerable Web Application (DVWA)

A curated list of resources for learning about application security

MISP (core software) - Open Source Threat Intelligence and Sharing Platform (formely known as Malware Information Sharing Platform)

Eloquent roles and abilities.

A minimalist, open source online pastebin where the server has zero knowledge of pasted data. Data is encrypted/decrypted in the browser using 256 bits AES.

Passbolt CE Backend, a JSON API written with Cakephp

PHP frontend for security.symfony.com

The security system is one of the most powerful parts of Symfony and can largely be controlled via its configuration.

Captcha for Laravel 5/6/7

A php.ini scanner for best security practices

A framework agnostic authentication & authorization system.

PHP Captcha library

The Security component provides a complete security system for your web application.

Security provides an infrastructure for sophisticated authorization systems, which makes it possible to easily separate the actual authorization logic from so called user providers that hold the users credentials. It is inspired by the Java Spring framework.

The Security CSRF (cross-site request forgery) component provides a class CsrfTokenManager for generating and validating CSRF tokens.

The Guard component brings many layers of authentication together, making it much easier to create complex authentication systems where you have total control.

Security provides an infrastructure for sophisticated authorization systems, which makes it possible to easily separate the actual authorization logic from so called user providers that hold the users credentials. It is inspired by the Java Spring framework.

A flexible, driver based Acl package for PHP 5.4+

FiercePhish is a full-fledged phishing framework to manage all phishing engagements. It allows you to track separate phishing campaigns, schedule sending of emails, and much more.

PHP Secure Configuration Checker

An authorization library that supports access control models like ACL, RBAC, ABAC in PHP .

WordPress static site generator for security, performance and cost benefits

Pure PHP polyfill for ext/sodium

PHP library for Two Factor Authentication (TFA / 2FA)

Authentication for PHP. Simple, lightweight and secure.

Create and validate signed URLs with a limited lifetime

Web Application Firewall (WAF) package for Laravel

☕ Latte: the intuitive and fast template engine for those who want the most secure PHP sites.

Build Content-Security-Policy headers from a JSON file (or build them programmatically)