PHP Static Analysis Tool - discover bugs in your code without running it!

Damn Vulnerable Web Application (DVWA)

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

Home of the Joomla! Content Management System

The most popular open source electronic health records and medical practice management solution.

🌻 The collaborative editing software that runs Wikipedia. Mirror from https://gerrit.wikimedia.org/g/mediawiki/core. See https://mediawiki.org/wiki/Developer_access for contributing.

【Hello CTF】题目配套，免费开源的CTF入门教程，针对0基础新手编写，同时兼顾信息差的填补，对各阶段的CTFer都友好的开源教程，致力于CTF和网络安全的开源生态！

Xdebug — Step Debugger and Debugging Aid for PHP

phpBB Development: phpBB is a popular open-source bulletin board written in PHP. This repository also contains the history of version 2.

Extension exposing PHP 7 abstract syntax tree

RIPS - A static source code analyser for vulnerabilities in PHP scripts

The official WeBid github fork

FUGIO: Automatic Exploit Generation for PHP Object Injection Vulnerabilities

Parser utility to generate ASTs from PHP source code suitable to be processed by Joern.