Tagged php

Generate a PHP MCP server with tools, resources, prompts and tests using the official SDK

Find insecure deserialization in Java, PHP, Python and .NET apps to get code execution

Bypass PHP login checks with loose comparison and magic hash type juggling

Write PHP scripts for Windmill workflows and API automation

Build PHP 8.3 apps with Laravel or Symfony, strict typing, PHPStan and PSR standards

Test insecure deserialization in Java, PHP, .NET, Python and Node.js apps

Hunt insecure deserialization across Java, Python, .NET, PHP and Ruby

Test path traversal and local file inclusion for file reads and PHP wrapper RCE

Exploit PHP loose comparison and magic hash flaws to bypass authentication

Hunt insecure deserialization in Java, PHP, Python, .NET and Ruby applications

Install PHP, Java, Node.js, Go, Python or .NET runtime versions on a BaoTa server

Create and delete PHP, static and reverse-proxy sites on a BaoTa server

Solve CTF web challenges using PHP tricks, SSTI chains and deserialization gadgets

Guide authorized insecure deserialization tests across Java, PHP, Python and .NET

Test Java, PHP and Python deserialization flaws that can lead to remote code execution

Test PHP loose comparisons and type juggling in auth and HMAC checks

Test exposed Redis, PHP-FPM, Hadoop and similar services with no authentication

Write idiomatic PHP with generators, SPL structures and modern OOP

Exploit unsafe deserialization of pickle, PHP and Java data for code execution

Exploit local and remote file inclusion to read files or execute code in PHP

Audit PHP source code end to end, from route mapping to exploit chains

Audit PHP code for auth bypass, broken access control and weak crypto

Escape PHP disable_functions and open_basedir limits after gaining a webshell

Combine PHP audit findings into exploit chains and scan Composer dependencies

Audit PHP code for file upload, include, write and archive extraction flaws

Check PHP frameworks like Laravel, ThinkPHP and WordPress for known flaws

Audit PHP web code for XSS, CSRF, open redirects, CRLF and cookie flaws

Audit PHP code for SQL, command, LDAP, expression injection and SSRF

Audit PHP code for unserialize gadget chains, XXE and template injection

Bypass PHP loose comparisons and magic hash checks for authentication flaws

Generate and upload JSP, PHP or ASPX webshells after a file upload or LFI bug

Turn an exposed phpinfo page into remote code execution on PHP servers

Audit Java, .NET and PHP code for security flaws with evidence