Mochazz/ThinkPHP-Vuln resource

Health v2 · maintenance only

Flags: no_releases

Adoption not part of the score

1123 stars · 167 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A curated collection of detailed vulnerability analyses for the ThinkPHP PHP framework, covering SQL injection, arbitrary file write, deserialization POP chains, and more across ThinkPHP 5 and 6. It is written as educational material for people learning PHP code auditing.

Use cases

• learn php code auditing through real framework vulnerabilities
• study thinkphp sql injection vulnerabilities
• understand thinkphp deserialization pop chains
• research historical thinkphp security flaws
• prepare for web security ctf challenges involving thinkphp
• review thinkphp vulnerability writeups before pentesting

When to choose

• you are learning PHP code auditing with real-world examples
• you need detailed root-cause analysis of ThinkPHP CVEs
• you want a reference of ThinkPHP vulnerability classes by version

When to avoid

• you need an exploit toolkit or scanner rather than writeups
• you need analyses for frameworks other than ThinkPHP
• you need guaranteed coverage of the latest vulnerabilities, as updates are irregular

Facets

learning-resource · maturity maintenance

security documentation developer-tools security web-development tutorials developer-tools python cross-platform thinkphp vulnerability-analysis code-audit php penetration-testing awesome-lists

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Mochazz/ThinkPHP-Vuln")