Alternatives and similar repositories for php-security-check-list

Users that are interested in php-security-check-list are comparing it to the libraries listed below

• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆353Updated 2 months ago
• incredibleindishell / CORS-vulnerable-Lab
  Sample vulnerable code and its exploit code
  ☆191Updated 4 years ago
• s0md3v / nano
  Nano is a family of PHP web shells which are code golfed for stealth.
  ☆442Updated 5 years ago
• snoopysecurity / dvws
  Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…
  ☆455Updated 3 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆401Updated 4 years ago
• hexrom / PenetrationTesting-Playbook
  Penetration Testing Playbook (PTP)
  ☆175Updated 6 years ago
• robocoder / rips-scanner
  RIPS - A static source code analyser for vulnerabilities in PHP scripts
  ☆317Updated 3 years ago
• tulpar / tulpar
  Tulpar - Web Vulnerability Scanner
  ☆201Updated 5 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆294Updated 6 years ago
• ropnop / serverless_toolkit
  A collection of useful Serverless functions I use when pentesting
  ☆385Updated 2 years ago
• fakhrizulkifli / Defeating-PHP-GD-imagecreatefromjpeg
  Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
  ☆148Updated 9 years ago
• Rizer0 / Log-killer
  Clear all your logs in [linux/windows] servers 🛡️
  ☆313Updated 4 years ago
• amolnaik4 / bodhi
  Bodhi - Client-side Vulnerability Playground
  ☆120Updated 3 years ago
• Damian89 / xssfinder
  Toolset for detecting reflected xss in websites
  ☆112Updated 6 years ago
• P0cL4bs / kadimus
  kadimus is a tool to check and exploit lfi vulnerability.
  ☆535Updated 4 years ago
• codewatchorg / sqlipy
  SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.
  ☆254Updated 10 months ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆225Updated 3 months ago
• bugbountyforum / XSS-Radar
  ☆326Updated 7 years ago
• frizb / Bypassing-Web-Application-Firewalls
  A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
  ☆276Updated 6 years ago
• b1n4ry4rms / RedTeam-Pentest-Cheatsheets
  Red Teaming :: Penetration Testing :: Offensive Security :: OSCP :: OSCE :: CheatSheets :: Tools :: etc...
  ☆146Updated 6 years ago
• ODSdev / fast-subdomain-scanner
  Fast subdomain bruteforce enumerator in PHP 7.1
  ☆33Updated 8 years ago
• pathetiq / BurpSmartBuster
  A Burp Suite content discovery plugin that add the smart into the Buster!
  ☆383Updated 4 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆166Updated 5 years ago
• franccesco / getaltname
  Extract subdomains from SSL certificates in HTTPS sites.
  ☆384Updated 2 months ago
• Varbaek / xsser
  From XSS to RCE 2.75 - Black Hat Europe Arsenal 2017 + Extras
  ☆425Updated 5 years ago
• nettitude / xss_payloads
  Exploitation for XSS
  ☆715Updated 3 years ago
• c0rv4x / project-black
  Pentest/BugBounty progress control with scanning modules
  ☆281Updated 4 years ago
• dreadlocked / Drupalgeddon2
  Exploit for Drupal v7.x + v8.x (Drupalgeddon 2 / CVE-2018-7600 / SA-CORE-2018-002)
  ☆587Updated 4 years ago
• alienwithin / OWASP-mth3l3m3nt-framework
  OWASP Mth3l3m3nt Framework is a penetration testing aiding tool and exploitation framework. It fosters a principle of attack the web usin…
  ☆166Updated 4 years ago
• cyrus-and / fracker
  PHP function tracker
  ☆241Updated this week