The PHP Unit Testing framework.

A PHP parser written in PHP

PHP Static Analysis Tool - discover bugs in your code without running it!

Phan is a static analyzer for PHP. Phan prefers to avoid false-positives and attempts to prove incorrectness rather than correctness.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Xdebug — Step Debugger and Debugging Aid for PHP

Beautiful and understandable static analysis tool for PHP

A collection of PHP backdoors. For educational or testing purposes only.

Extension exposing PHP 7 abstract syntax tree

Here be dragons

Dead code detection with tombstones for PHP 🪦🧟

A Control Flow Graph implementation in PHP

A PHP Type reconstruction library

[READ ONLY] Report generation for Tombstones created with the scheb/tombstone-logger library

Dynadot API example in PHP

This code demonstrates how to get code coverage for your php code, when it is test through a browser

lightweight PHP-cli app that parses the Apache access log and saves it to a mysql (PDO) database.

Backdoor projects that use composer (exploit https://github.com/composer/composer/issues/1074)

Enamad for PrestaShop