Alternatives and similar repositories for php-security-check-list

Users that are interested in php-security-check-list are comparing it to the libraries listed below

• dustyfresh / PHP-vulnerability-audit-cheatsheet
  This will assist you in the finding of potentially vulnerable PHP code. Each type of grep command is categorized in the type of vulnerabi…
  ☆354Updated 3 months ago
• incredibleindishell / CORS-vulnerable-Lab
  Sample vulnerable code and its exploit code
  ☆191Updated 4 years ago
• s0md3v / nano
  Nano is a family of PHP web shells which are code golfed for stealth.
  ☆442Updated 5 years ago
• Bo0oM / PHP_imap_open_exploit
  Bypassing disabled exec functions in PHP (c) CRLF
  ☆401Updated 4 years ago
• hexrom / PenetrationTesting-Playbook
  Penetration Testing Playbook (PTP)
  ☆174Updated 6 years ago
• commixproject / commix-testbed
  A collection of web pages, vulnerable to command injection flaws.
  ☆180Updated 2 years ago
• bugbountyforum / XSS-Radar
  ☆326Updated 7 years ago
• neex / gifoeb
  exploit for ImageMagick's uninitialized memory disclosure in gif coder
  ☆281Updated 7 years ago
• trietptm / SQL-Injection-Payloads
  SQL Injection Payloads for Burp Suite, OWASP Zed Attack Proxy,...
  ☆232Updated 5 years ago
• frizb / Bypassing-Web-Application-Firewalls
  A series of python scripts for generating weird character combinations for bypassing web application firewalls (WAF) and XSS blockers
  ☆279Updated 6 years ago
• c0rv4x / project-black
  Pentest/BugBounty progress control with scanning modules
  ☆281Updated 4 years ago
• qazbnm456 / awesome-security-trivia
  🤙 Security Trivia that rare people know.
  ☆162Updated 5 years ago
• Bo0oM / WAF-bypass-Cheat-Sheet
  Another way to bypass WAF Cheat Sheet (draft)
  ☆426Updated 6 years ago
• daudmalik06 / ReconCat
  A small Php application to fetch archive url snapshots from archive.org. using it you can fetch complete list of snapshot urls of any yea…
  ☆80Updated 7 years ago
• tulpar / tulpar
  Tulpar - Web Vulnerability Scanner
  ☆201Updated 5 years ago
• redhuntlabs / BurpSuite-Asset_Discover
  Burp Suite extension to discover assets from HTTP response.
  ☆227Updated 5 months ago
• hvqzao / liffy
  Local File Inclusion Exploitation Tool (mirror)
  ☆127Updated 8 years ago
• TyrantSec / Fuzzing
  Fuzzing Payloads to Assist in Web Application Testing.
  ☆166Updated 6 years ago
• 003random / 003Recon
  Some tools to automate recon - 003random
  ☆294Updated 7 years ago
• emadshanab / facebook-bug-bounty-writeups
  Facebook Bug Bounties
  ☆102Updated 4 years ago
• RhinoSecurityLabs / SleuthQL
  Python3 Burp History parsing tool to discover potential SQL injection points. To be used in tandem with SQLmap.
  ☆469Updated 5 years ago
• SolomonSklash / chomp-scan
  A scripted pipeline of tools to streamline the bug bounty/penetration test reconnaissance phase, so you can focus on chomping bugs.
  ☆396Updated 5 years ago
• snoopysecurity / dvws
  Damn Vulnerable Web Services is an insecure web application with multiple vulnerable web service components that can be used to learn rea…
  ☆455Updated 3 years ago
• fakhrizulkifli / Defeating-PHP-GD-imagecreatefromjpeg
  Proof-of-concept to exploit the flaw in the PHP-GD built-in function, imagecreatefromjpeg()
  ☆150Updated 9 years ago
• ropnop / serverless_toolkit
  A collection of useful Serverless functions I use when pentesting
  ☆387Updated 2 years ago
• incredibleindishell / sqlite-lab
  This code is vulnerable to SQL Injection and having SQLite database. For SQLite database, SQL Injection payloads are different so it is f…
  ☆160Updated 3 years ago
• guardrailsio / awesome-php-security
  Awesome PHP Security Resources 🕶🐘🔐
  ☆994Updated last year
• nettitude / xss_payloads
  Exploitation for XSS
  ☆718Updated 3 years ago
• SpiderMate / B-XSSRF
  Toolkit to detect and keep track on Blind XSS, XXE & SSRF
  ☆294Updated 5 years ago
• JannisKirschner / Horn3t
  Powerful Visual Subdomain Enumeration at the Click of a Mouse
  ☆139Updated 6 years ago