SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

A PHP parser written in PHP

This is a webshell open source project

Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

一个漏洞扫描器粘合剂,添加目标后30款工具自动调用；支持 web扫描、系统扫描、子域名收集、目录扫描、主机扫描、主机发现、组件识别、URL爬虫、XRAY扫描、AWVS自动扫描、POC批量验证，SSH批量测试、vulmap。

Pwn stuff.

构建并优化高效的渗透 Fuzz 字典

一个各种方式突破Disable_functions达到命令执行的shell

国内各大CTF赛题及writeup整理

PHP Runtime Vulnerability Detection

记录自己写的工具和学习笔记

Cardinal Web 环境示例