Alternatives and similar repositories for PHPVulFinder

Users that are interested in PHPVulFinder are comparing it to the libraries listed below

• SycloverSecurity / SCTF2020

  View on GitHub
  SCTF2020
  ☆86Jul 10, 2020Updated 5 years ago
• wdeilim / Audit-Rules

  View on GitHub
  A curated list of audit rules which extract from Source Code Auditing tools.
  ☆15Feb 19, 2020Updated 5 years ago
• LFYSec / ToyCompiler

  View on GitHub
  A c0 -> LLVM IR compiler, with some optimization.
  ☆13Jul 13, 2020Updated 5 years ago
• soot-oss / TaintAnalysis

  View on GitHub
  Taint analysis implementation based on Heros and Soot
  ☆45May 6, 2024Updated last year
• ddworken / ide-worm

  View on GitHub
  ☆15Aug 6, 2021Updated 4 years ago
• voidfyoo / rwctf-2021-old-system

  View on GitHub
  ☆78Jan 12, 2021Updated 5 years ago
• oliverklee / pixy

  View on GitHub
  Pixy is a scanner static code analysis tools that scans PHP applications for security vulnerabilities.
  ☆142Jan 5, 2024Updated 2 years ago
• cwkiller / ClassLinefix

  View on GitHub
  Java bytecode line number restoration tool
  ☆134Aug 31, 2025Updated 5 months ago
• vidar-team / hctf_backend

  View on GitHub
  ☆47Dec 7, 2022Updated 3 years ago
• OneSourceCat / phpvulhunter

  View on GitHub
  A tool that can scan php vulnerabilities automatically using static analysis methods
  ☆488Mar 20, 2018Updated 7 years ago
• Ramos-dev / graph4code

  View on GitHub
  超硬核！使用图数据技术发现软件漏洞
  ☆185Sep 1, 2021Updated 4 years ago
• impakho / de1ctf-mc_challs

  View on GitHub
  de1ctf 2020 mc challs - mc系列题目
  ☆18May 6, 2020Updated 5 years ago
• ceclin / 0ctf-2021-finals-soln-buggy-loader

  View on GitHub
  solution to buggyLoader of 0CTF/TCTF 2021 Finals
  ☆20Sep 27, 2021Updated 4 years ago
• 360-a-team / QAX-A-TEAM

  View on GitHub
  团队更名为 QAX A-TEAM
  ☆10Apr 28, 2019Updated 6 years ago
• SecCoder-Security-Lab / spring-cloud-netflix-hystrix-dashboard-cve-2021-22053

  View on GitHub
  Spring Cloud Netflix Hystrix Dashboard template resolution vulnerability CVE-2021-22053
  ☆37Dec 15, 2022Updated 3 years ago
• software-engineering-and-security / Gleipner

  View on GitHub
  A benchmark for Java gadget chain detecting algorithms.
  ☆15Jun 20, 2025Updated 7 months ago
• threedr3am / log-agent

  View on GitHub
  利用agent hock指定的class，在jar运行周期内，用于跟踪被执行的方法，辅助做一些事情，比如挖洞啊
  ☆125Jul 17, 2020Updated 5 years ago
• threedr3am / gadgetinspector

  View on GitHub
  一个利用ASM对字节码进行污点传播分析的静态代码审计应用（添加了大量代码注释，适合大家进行源码学习）。也加入了挖掘Fastjson反序列化gadget chains和SQLInject（JdbcTemplate、MyBatis、JPA、Hibernate、原生jdbc等）静…
  ☆458Mar 24, 2022Updated 3 years ago
• hudangwei / codemillx

  View on GitHub
  codemillx is a tool for CodeQL, extract the comments in the code and generate codeql module. 强化Go开源项目安全检测(内含开源项目漏洞挖掘方法)
  ☆205Mar 19, 2022Updated 3 years ago
• hac425xxx / ida2codeql

  View on GitHub
  IDA Hexrays To CodeQL
  ☆51Nov 7, 2024Updated last year
• Nu1LCTF / n1ctf-2019

  View on GitHub
  ☆119Mar 21, 2020Updated 5 years ago
• SpringJasmine / Jasmine

  View on GitHub
  ☆30Aug 30, 2022Updated 3 years ago
• plume-oss / plume

  View on GitHub
  Plume is a code representation benchmarking library with options to extract the AST from Java bytecode and store the result in various gr…
  ☆77Oct 14, 2024Updated last year
• pascal-lab / java-benchmarks

  View on GitHub
  ☆12Nov 21, 2023Updated 2 years ago
• dlsniper / phas

  View on GitHub
  Personal Home Automation System
  ☆10Jul 18, 2025Updated 6 months ago
• xhycccc / Shiro-Vuln-Demo

  View on GitHub
  Shiro漏洞实例源码
  ☆26Jul 1, 2021Updated 4 years ago
• fate0 / xmark

  View on GitHub
  A PHP7 extension that can hook most functions/classes and parts of opcodes
  ☆243Sep 17, 2021Updated 4 years ago
• Smi1eSEC / Web-Security-Note

  View on GitHub
  Record some common Web security sites
  ☆221Aug 31, 2022Updated 3 years ago
• ircmaxell / php-cfg

  View on GitHub
  A Control Flow Graph implementation in PHP
  ☆247Sep 20, 2025Updated 4 months ago
• taielab / Taie-Bugbounty-killer

  View on GitHub
  挖掘国内外漏洞平台必备的自动化捡钱赏金技巧，看了并去做了捡钱如喝水。
  ☆423Nov 17, 2020Updated 5 years ago
• Ruil1n / after-deserialization-attack

  View on GitHub
  Java After-Deserialization Attack
  ☆79Apr 26, 2021Updated 4 years ago
• lcatro / PHP_Source_Audit_Tools

  View on GitHub
  PHP 白盒分析工具,结合AST 和数据流跟踪分析代码,达到自动化白盒审计功能
  ☆148May 14, 2018Updated 7 years ago
• NeSE-Team / OurChallenges

  View on GitHub
  writeups for our challenges
  ☆147Dec 11, 2022Updated 3 years ago
• VainlyStrain / charon

  View on GitHub
  A polyglot static analysis engine for detecting vulnerabilities in scripting languages native extensions based on joern.
  ☆21Sep 1, 2025Updated 5 months ago
• secure-software-engineering / SPDS-experiments

  View on GitHub
  ☆11Oct 10, 2018Updated 7 years ago
• NeSE-Team / XNUCA2020Qualifier

  View on GitHub
  writeups for XNUCA2020Qualifier
  ☆70Dec 1, 2020Updated 5 years ago
• Anemone95 / taint-benchmark

  View on GitHub
  A benchmark to evaluate taint analysis
  ☆27Jun 20, 2022Updated 3 years ago
• wonderkun / CTFENV

  View on GitHub
  为应对CTF比赛而搭建的各种环境
  ☆156May 9, 2020Updated 5 years ago
• opensec-cn / chip

  View on GitHub
  a simple tool to detect potential security threat in php code
  ☆317Sep 9, 2024Updated last year