Lotus6/ThinkphpGUI

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

1595 stars · 182 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Java-based GUI vulnerability exploitation tool targeting the ThinkPHP framework, supporting detection of vulnerabilities across ThinkPHP 3.x, 5.x, and 6.x versions. It provides command execution, log leakage detection, and getshell capabilities, including batch scanning of multiple targets.

Use cases

• detect thinkphp framework vulnerabilities in a target web app
• scan multiple urls for thinkphp rce in batch
• exploit thinkphp 5.x remote code execution
• check for thinkphp log file leakage
• get a shell on a vulnerable thinkphp server
• run commands on a compromised thinkphp host

When to choose

• you need a point-and-click GUI to test ThinkPHP targets during an authorized pentest
• you want batch scanning of many URLs for multiple ThinkPHP versions
• you need quick RCE and getshell checks against ThinkPHP 3.x/5.x/6.x

When to avoid

• you target frameworks other than ThinkPHP
• you need a CLI tool for CI/CD automation
• you require a maintained tool with active development and a clear license

Facets

application · maturity maintenance

penetration-testing vulnerability-scanning security gui security penetration-testing web-development cross-platform jvm thinkphp exploitation rce getshell java gui-tool offensive-security desktop

Member repositories

For agents

markdown · JSON · MCP: product_card(name="Lotus6/ThinkphpGUI")