lboynton
Follow
Stars
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
PHP Static Analysis Tool - discover bugs in your code without running it!
🛁 Clean Code concepts adapted for PHP
Vulnerability scanner based on vulners.com search API
Tamper Dev is an extension that allows you to intercept and edit HTTP/HTTPS requests and responses as they happen without the need of a proxy. Works across all operating systems (including Chrome OS).
A lightweight streaming server which brings DLNA / UPNP and Chromecast support to PulseAudio and Linux
PHPChunkit - PHPUnit test runner with test chunking capabilities.
Prevent reverse tabnabbing phishing attacks caused by _blank
A curated list of resources for learning about application security
A complete computer science study plan to become a software engineer.
Examples from The Hitchhiker's Guide To Cross-Site Scripting (XSS)
Thin assertion library for use in libraries and business-model
A PoC for exploiting Guzzle's HTTP_PROXY untrusted read
Web framework that allows performing periodic syncs of data sources and performing analysis on the identified results
Find your Facebook friends' Tinder profiles. Don't actually use this by the way that's weird. Not even in a good way.
Roleplay as the NSA by making creepy graphs of your friends
Security Guide for Developers (实用性开发人员安全须知)
CSS is powerful, you can do a lot of things without JS.
A reviewed list of useful PHP static analysis tools
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…
Humbug is a Mutation Testing framework for PHP to measure the real effectiveness of your test suites and assist in their improvement. It eats Code Coverage for breakfast.
A curated list of topics to start learning software engineering