SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

This is a webshell open source project

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Webshell && Backdoor Collection

CMS漏洞测试用例集合

XVWA is a badly coded web application written in PHP/MySQL that helps security enthusiasts to learn application security.

一个各种方式突破Disable_functions达到命令执行的shell

AoiAWD-专为比赛设计，便携性好，低权限运行的EDR系统。

DoraBox - Basic Web Vulnerability Training

PHP Runtime Vulnerability Detection

MASSCAN Web UI

small set of PHP scripts to practice exploiting LFI, RFI and CMD injection vulns

Web漏洞渗透测试靶场

跟踪真实漏洞相关靶场环境搭建

甲方安全工程师必备，内部钓鱼系统

还原ZendGuard处理后的php代码

Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromgif()

Practice hacking JWT tokens

A broute detect WAF by PHP using to AWD

It is a DVWA with some plugins based on real wooyun bug reports

PHP代码审计分段讲解