SkyBlueEternal/thinkphp-RCE-POC-Collection resource

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1193 stars · 231 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of proof-of-concept payloads for ThinkPHP 5.x remote code execution and SQL injection vulnerabilities. It documents exploit URLs and request examples for various ThinkPHP versions rather than providing a runnable tool.

Use cases

• test whether a ThinkPHP 5.x site is vulnerable to RCE
• learn how ThinkPHP invokefunction RCE exploits work
• verify patching of ThinkPHP CVEs during a pentest
• collect reference payloads for security training
• check for SQL injection in ThinkPHP modules

When to choose

• you need ready-made POC payloads for ThinkPHP 5.x vulnerabilities
• you are doing authorized penetration testing or vulnerability assessment of ThinkPHP apps
• you are studying ThinkPHP framework exploitation techniques

When to avoid

• you need an automated scanner rather than manual payloads
• you want a maintained tool with updates for new CVEs (last release 2019)
• you need a production security tool with a proper license

Facets

learning-resource · maturity maintenance

penetration-testing security security penetration-testing web-development poc-collection thinkphp rce vulnerability-research exploit-database web-server

Member repositories

For agents

markdown · JSON · MCP: product_card(name="SkyBlueEternal/thinkphp-RCE-POC-Collection")