bowu678/php_bugs resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1723 stars · 361 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of PHP code audit exercises explained step by step, based on CTF-style challenges covering sensitive functions and PHP language quirks. Each example demonstrates a specific vulnerability class such as variable overwrite, SQL injection bypasses, and type-juggling tricks, with source code deployable locally.

Use cases

• learn php code auditing from scratch
• practice ctf web challenges for php vulnerabilities
• understand php sensitive functions and type juggling
• study sql injection bypass techniques like with rollup
• train junior security researchers on vulnerability principles
• set up local vulnerable php apps for static analysis practice

When to choose

• you are a beginner learning PHP security auditing
• you want hands-on CTF-style PHP vulnerability exercises
• you need examples of PHP-specific quirks and bypasses

When to avoid

• you need production-ready security tooling or scanners
• you require a maintained project with a license and active releases
• you are not working with PHP or web security

Facets

learning-resource · maturity maintenance

security penetration-testing developer-tools security penetration-testing education tutorials php self-hosted php-code-audit ctf-challenges vulnerability-analysis web-security security-training web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="bowu678/php_bugs")