c0ny1/upload-labs resource

Health v2 · maintenance only

Flags: no_license

Adoption not part of the score

4190 stars · 826 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A PHP-based deliberately vulnerable training range (CTF-style lab) that collects 20 levels of file upload vulnerabilities found in penetration testing and CTF challenges. It helps learners systematically understand and practice exploiting different types of upload vulnerabilities.

Use cases

• practice exploiting file upload vulnerabilities
• learn web security through hands-on CTF challenges
• train penetration testing skills on upload bypass techniques
• set up a local vulnerable lab for security education
• study how different upload filtering mechanisms can be bypassed

When to choose

• you want hands-on practice with file upload vulnerabilities in a safe lab
• you are preparing for CTF competitions or pentest certifications
• you are teaching or learning web security concepts around uploads

When to avoid

• you need a production-ready secure file upload solution
• you want a modern framework rather than a legacy PHP 5.x lab
• you are looking for automated vulnerability scanning rather than manual practice

Facets

learning-resource · maturity maintenance

security penetration-testing security penetration-testing education web-development php windows self-hosted vulnerable-app ctf file-upload-vulnerabilities security-training wargame pentest-lab docker linux

Member repositories

For agents

markdown · JSON · MCP: product_card(name="c0ny1/upload-labs")