# Lotus6/ThinkphpGUI

Thinkphp(GUI)漏洞利用工具，支持各版本TP漏洞检测，命令执行，getshell。

Repository: https://github.com/Lotus6/ThinkphpGUI
Canonical: https://ross.abutalabs.com/products/thinkphpgui
Language: Java
License Family: other
Last push: 2022-06-01T18:48:34+00:00

## Health v2 (maintenance only)
Score: 23/100 (v2, computed 2026-09-03T02:20:16.233290+00:00)
- activity 0, release rhythm 8, longevity 100
- inputs: {"age_days": 1898, "days_push": 1554, "days_rel": null, "gap_med": null, "n_releases_24m": 0}
- flags: no_license
- formula: round(0.45*activity + 0.35*rhythm + 0.20*longevity); archived -> min(score, 10)

## Adoption (not part of the score)
Stars 1595, forks 182 (observed 2026-08-28T04:05:09.088139+00:00)

## What it is
A Java-based GUI vulnerability exploitation tool targeting the ThinkPHP framework, supporting detection of vulnerabilities across ThinkPHP 3.x, 5.x, and 6.x versions. It provides command execution, log leakage detection, and getshell capabilities, including batch scanning of multiple targets.

## Use cases
- detect thinkphp framework vulnerabilities in a target web app
- scan multiple urls for thinkphp rce in batch
- exploit thinkphp 5.x remote code execution
- check for thinkphp log file leakage
- get a shell on a vulnerable thinkphp server
- run commands on a compromised thinkphp host

## When to choose
- you need a point-and-click GUI to test ThinkPHP targets during an authorized pentest
- you want batch scanning of many URLs for multiple ThinkPHP versions
- you need quick RCE and getshell checks against ThinkPHP 3.x/5.x/6.x

## When to avoid
- you target frameworks other than ThinkPHP
- you need a CLI tool for CI/CD automation
- you require a maintained tool with active development and a clear license

## Facets
- artifact type: application
- maturity: maintenance
- function: penetration-testing, vulnerability-scanning, security, gui
- domain: security, penetration-testing, web-development
- platform: cross-platform, jvm
- tags: thinkphp, exploitation, rce, getshell, java, gui-tool, offensive-security, desktop

## Member repositories
- Lotus6/ThinkphpGUI (main) score 23

## Provenance
- Observed fields: from GitHub, fetched 2026-08-28T04:05:09.088139+00:00.
- Health v2: computed from the inputs above; adoption is never an input.
- Inferred fields (summary, facets, guidance): AI-extracted, prompt v1, taxonomy v1, on 2026-08-30T03:54:05.398138+00:00, confidence not recorded.
  - readme: https://github.com/Lotus6/ThinkphpGUI (fetched 2026-08-28T04:05:09.088139+00:00, sha 258b4310143a)
- Data as of 2026-08-30T08:39:29.467469+00:00.