SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A PHP parser written in PHP

程序员如何优雅的挣零花钱，2.0版，升级为小书了。Most of this not work outside China , so no English translate

🚦 Cachet, the open-source, self-hosted status page system.

This is a webshell open source project

Multi-purpose proxy service management system

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

SQLI labs to test error based, Blind boolean based, Time based.

Use WordPress backend with Laravel or any PHP application

一个想帮你总结所有类型的上传漏洞的靶场

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

一个关于PHP的代码审计项目

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

Pwn stuff.

PHP代码审计分段讲解

💎 Go! AOP PHP - modern aspect-oriented framework for the new level of software development

Zentao is an agile(scrum) project management system/tool, Free Upgrade Forever!​

🔮 Better Reflection is a reflection API that aims to improve and provide more features than PHP's built-in reflection API.

一个各种方式突破Disable_functions达到命令执行的shell

PHP extension to get insight about memory usage

Extension exposing PHP 7 abstract syntax tree

An early-stage PHP parser designed for IDE usage scenarios.

A PHP VM implementation in PHP

Security module for php7 and php8 - Killing bugclasses and virtual-patching the rest!

🙈 实现过滤敏感词汇🔞，基于确定有穷自动机(DFA)算法，支持composer安装扩展

一个经典的XSS渗透管理平台

LaraCMS 是在学习 laravel （ web 开发实战进阶 + 实战构架 API 服务器） 过程中产生的一个业余作品，试图通过简单的方式，快速构建一套基本的企业站同时保留很灵活的扩展能力和优雅的代码方式，当然这些都得益Laravel的优秀设计。同时LaraCMS 也是一个学习Laravel 不错的参考示例。

A parsing PHP obfuscator

PHP Exchange Web Services

a Open Source PHP Code Confusion + Encryption Project