security-checklist / php-security-check-list

Related projects: ⓘ

• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆345Updated 6 years ago
• bl4de / security_whitepapers
  ☆376Updated this week
• incredibleindishell / CORS-vulnerable-Lab
  Sample vulnerable code and its exploit code
  ☆187Updated 3 years ago
• frizb / Bypassing-Web-Application-Firewalls
  A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
  ☆273Updated 5 years ago
• s0md3v / nano
  Nano is a family of PHP web shells which are code golfed for stealth.
  ☆431Updated 4 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆400Updated 3 years ago
• tulpar / tulpar
  Tulpar - Web Vulnerability Scanner
  ☆197Updated 4 years ago
• OWASP / OWASPWebGoatPHP
  A deliberately vulnerable web application for learning web application security.
  ☆118Updated 6 months ago
• ak1t4 / open-redirect-scanner
  ☆207Updated this week
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆165Updated 5 years ago
• robocoder / rips-scanner
  RIPS - A static source code analyser for vulnerabilities in PHP scripts
  ☆310Updated 2 years ago
• qazbnm456 / awesome-security-trivia
  🤙 Security Trivia that rare people know.
  ☆155Updated 4 years ago
• bugbountyforum / XSS-Radar
  ☆317Updated 6 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆464Updated 4 years ago
• OWASP / vbscan
  OWASP VBScan is a Black Box vBulletin Vulnerability Scanner
  ☆323Updated 5 years ago
• commixproject / commix-testbed
  A collection of web pages, vulnerable to command injection flaws.
  ☆172Updated last year
• neex / gifoeb
  exploit for ImageMagick's uninitialized memory disclosure in gif coder
  ☆279Updated 7 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆511Updated 4 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆294Updated 6 years ago
• hexrom / PenetrationTesting-Playbook
  Penetration Testing Notes and Playbook (PTP)
  ☆173Updated 5 years ago
• Cillian-Collins / dirscraper
  OSINT scanning tool which discovers and maps directories found in javascript files hosted on a website.
  ☆220Updated 5 years ago
• stivalet / PHP-Vulnerability-test-suite
  Collection of vulnerable and fixed PHP synthetic test cases
  ☆57Updated 11 months ago
• Damian89 / xssfinder
  Toolset for detecting reflected xss in websites
  ☆109Updated 5 years ago
• m4ll0k / Aron
  ☆130Updated this week
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆225Updated 4 years ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆121Updated 7 years ago
• m4ll0k / Galileo
  ☆239Updated this week
• b1n4ry4rms / RedTeam-Pentest-Cheatsheets
  Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
  ☆145Updated 5 years ago
• ODSdev / fast-subdomain-scanner
  Fast subdomain bruteforce enumerator in PHP 7.1
  ☆34Updated 7 years ago
• IamHDT / Ecommerce-Website-Security-CheckList
  List of considerations for commerce site auditing and security teams. This is summary of action points and areas that need to be built in…
  ☆128Updated 3 years ago