Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
77,852 visible repositories in the index
1–18 of 18 · Most stars
Damn Vulnerable Web Application (DVWA)
A small PHP library to generate YouTube-like ids from numbers. Use it when you don't want to expose your database ids to the user.
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
The most popular PHP library for use with the Twitter OAuth REST API.
一个想帮你总结所有类型的上传漏洞的靶场
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
Laravel Eloquent roles and abilities.
Open source social sign on PHP Library. HybridAuth goal is to act as an abstract api between your application and various social apis and identities providers such as Facebook, Twitter and Google.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
Laravel Impersonate is a plugin that allows you to authenticate as your users.
A database of PHP security advisories
AWSGoat : A Damn Vulnerable AWS Infrastructure
一个关于PHP的代码审计项目
Self-hosted collaborative password manager for teams: folder-level access control, AES-256-GCM encryption, LDAP/AD, OAuth2 SSO, audit trail, REST API, browser extension. PHP/MySQL, Docker.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
A simple PHP Authentication that enables steam users to log into their steam account to access content!
List of Magento extensions with known security issues.
Dead simple, unobtrusive and extendable captcha solution for CakePHP