SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

一个想帮你总结所有类型的上传漏洞的靶场

一个好玩的Web安全-漏洞测试平台

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

一个关于PHP的代码审计项目

一个各种方式突破Disable_functions达到命令执行的shell

A powerful PHP WAF for AWD

使用分支对抗技术制作的PHP Webshell，截止2024年1月18日，共数十个查杀引擎免杀

针对CTF线下赛的通用WAF，日志审计功能。

该项目是利用docker技术创建的有漏洞的cms环境集合，可以进行练习

A scheduled task manager

WebIssues team collaboration system.

Stupid Simple CMS - Created to be simple. Blog posting CMS.