SQLI labs to test error based, Blind boolean based, Time based.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

《我用爬虫一天时间“偷了”知乎一百万用户，只为证明PHP是世界上最好的语言 》所使用的程序

构建优化高效的渗透 fuzz 字典合集

A CodeIgniter Content Management System

⚡ The most advanced open-source automatic algorithm online judge system | 南京邮电大学开源 Online Judge | QQ群：668108264

国内各大CTF赛题及writeup整理

A powerful PHP WAF for AWD

适用于一线安服的ctf培训题目，全docker环境一键启动

Mellivora is a CTF engine written in PHP

Python script to detect vulnerabilities inside PHP source code using static analysis, based on regex

Multi-language web CGI interfaces exploits.

YzmCMS是一款基于YZMPHP开发的一套轻量级开源内容管理系统，YzmCMS简洁、安全、开源、实用，可运行在Linux、Windows、MacOSX、Solaris等各种平台上，专注为公司企业、个人站长快速建站提供解决方案。

RCE exploit for dompdf

[Tool] Forge PHP FastCGI protocol to RCE with strict disable_functions

字节跳动 CTF 2021 线下决赛的一道 Web 题源码，主要考察 SSRF

Md5碰撞生成器

A Simple CTF Practice & Competition Platform

南京邮电大学第十届网络攻防大赛开源题目

该程序是基于php网页版的扫雷程序,利用html5,CSS3,Javascript,,php写的.