https://github.com/mattiasgeniar/php-exploit-scripts

A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.
https://github.com/mattiasgeniar/php-exploit-scripts

Last synced: 4 days ago
JSON representation

A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

• Host: GitHub
• URL: https://github.com/mattiasgeniar/php-exploit-scripts
• Owner: mattiasgeniar
• Created: 2014-06-27T08:13:09.000Z (over 10 years ago)
• Default Branch: master
• Last Pushed: 2024-02-26T10:44:28.000Z (10 months ago)
• Last Synced: 2024-10-15T04:08:51.000Z (about 2 months ago)
• Language: PHP
• Size: 1.51 MB
• Stars: 832
• Watchers: 65
• Forks: 231
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-security-collection - **643**星

README

        
# php-exploit-scripts

A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

### Why do you put these online? They're dangerous!

Yes, obviously. Don't copy them and store them on your own server. These are scripts found on hacked systems, so they're used to exploit the server and abuse some kind of vulnerability.

They are indeed dangerous in themselves. But if anyone can exploit a server or CMS, they can upload far more dangerous tools than these PHP scripts.

### Prettyfied the obfuscated code

All obfuscated code has been run through the [PHP Formatter](http://beta.phpformatter.com/), [PHP Beautifier](http://phpbeautifier.com/) or [UnPHP](https://www.unphp.net/) for readability (whichever was online at that time).