Alternatives and similar repositories for php-security-check-list:

Users that are interested in php-security-check-list are comparing it to the libraries listed below

• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆348Updated 6 years ago
• incredibleindishell / CORS-vulnerable-Lab
  Sample vulnerable code and its exploit code
  ☆189Updated 3 years ago
• 1N3 / XSSTracer
  A small python script to check for Cross-Site Tracing (XST)
  ☆136Updated 9 years ago
• s0md3v / nano
  Nano is a family of PHP web shells which are code golfed for stealth.
  ☆439Updated 5 years ago
• GONZOsint / WhatCMS
  CMS Detection and Exploit Kit based on Whatcms.org API
  ☆252Updated 3 months ago
• frizb / Bypassing-Web-Application-Firewalls
  A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
  ☆273Updated 6 years ago
• hexrom / PenetrationTesting-Playbook
  Penetration Testing Notes and Playbook (PTP)
  ☆175Updated 6 years ago
• incredibleindishell / sqlite-lab
  This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is f…
  ☆160Updated 3 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆296Updated 6 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆401Updated 4 years ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• bugbountyforum / XSS-Radar
  ☆326Updated 7 years ago
• tulpar / tulpar
  Tulpar - Web Vulnerability Scanner
  ☆199Updated 5 years ago
• Damian89 / xssfinder
  Toolset for detecting reflected xss in websites
  ☆112Updated 6 years ago
• kacperszurek / burp_wp
  Find known vulnerabilities in WordPress plugins and themes using Burp Suite proxy. WPScan like plugin for Burp.
  ☆180Updated 5 years ago
• robocoder / rips-scanner
  RIPS - A static source code analyser for vulnerabilities in PHP scripts
  ☆312Updated 3 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆123Updated 8 years ago
• neex / gifoeb
  exploit for ImageMagick's uninitialized memory disclosure in gif coder
  ☆280Updated 7 years ago
• 1N3 / MassBleed
  MassBleed SSL Vulnerability Scanner
  ☆243Updated 4 years ago
• cujanovic / Content-Bruteforcing-Wordlist
  Wordlist for content(directory) bruteforce discovering with Burp or dirsearch
  ☆212Updated 4 months ago
• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 8 months ago
• EdOverflow / proof-of-concepts
  A little collection of fun and creative proof of concepts to demonstrate the potential impact of a security vulnerability.
  ☆164Updated 5 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆526Updated 4 years ago
• ODSdev / fast-subdomain-scanner
  Fast subdomain bruteforce enumerator in PHP 7.1
  ☆33Updated 7 years ago
• c0rv4x / project-black
  Pentest/BugBounty progress control with scanning modules
  ☆283Updated 4 years ago
• lcashdol / Exploits
  Exploits for various CVEs
  ☆210Updated 4 years ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆221Updated last month
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆228Updated 5 years ago
• s0md3v / JShell
  JShell - Get a JavaScript shell with XSS.
  ☆516Updated 5 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆166Updated 5 years ago