SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

☁️ Nextcloud server, a safe home for all your data

Damn Vulnerable Web Application (DVWA)

This is a webshell open source project

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Collection of CTF Web challenges I made

一个各种方式突破Disable_functions达到命令执行的shell

针对ctf线下赛流量抓取(php)、真实环境流量抓取分析的工具

收集一些小型实用的工具