Damn Vulnerable Web Application (DVWA)
- dvwa
- php
- sql-injection
- security
75,859 visible repositories in the index
1–13 of 13 · Most stars
Damn Vulnerable Web Application (DVWA)
🕸️ Create REST and GraphQL APIs, scaffold Jamstack webapps, stream changes in real-time.
A PHP static analysis tool for finding errors and security vulnerabilities in PHP applications
A PoC that exploits a vulnerability to bypass the Xiaomi HyperOS community restrictions of BootLoader unlocked account bindings.
All in one tool for Information Gathering, Vulnerability Scanning and Crawling. A must have tool for all penetration testers
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
A database of PHP security advisories
AWSGoat : A Damn Vulnerable AWS Infrastructure
Official OpenMage LTS codebase | Migrate easily from Magento Community Edition in minutes! Download the source code for free or contribute to OpenMage LTS | Security vulnerability patches, bug fixes, performance improvements and more.
phpcs-security-audit is a set of PHP_CodeSniffer rules that finds vulnerabilities and weaknesses related to security in PHP code
A static analysis tool for security
List of Magento extensions with known security issues.
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance