SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, se…

Yii 2: The Fast, Secure and Professional PHP Framework

Damn Vulnerable Web Application (DVWA)

一个想帮你总结所有类型的上传漏洞的靶场

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Collection of CTF Web challenges I made

Pwn stuff.

PHP代码审计分段讲解

Hashtopolis - distributed password cracking with Hashcat

一个各种方式突破Disable_functions达到命令执行的shell

AoiAWD-专为比赛设计，便携性好，低权限运行的EDR系统。

Encoding and decoding a string into multiple variations.

Bypassing disabled exec functions in PHP (c) CRLF

Collection of vulnerable and fixed PHP synthetic test cases