Top 8 PHP Hacking Projects

DVWA

1 40 11,429 8.8 PHP

Damn Vulnerable Web Application (DVWA)

Project mention: Cybersecurity Beginner's Guide: Build Your Own Vulnerable Lab in 5 Minutes (DVWA + More) | dev.to | 2025-04-17

Step 2: Deploy DVWA (Damn Vulnerable Web App) DVWA is a classi learning platform containing common vulnerabilities like XSS, SQLi, CSRF, and file upload flaws. ✓Installation Steps:https://github.com/digininja/DVWA.git 1.Move DVWA into ServBay’s root directory (/Applications/ServBay/www/) Then modify the config.inc.php.dist file suffix to config.inc.php, and modify the database user name and password. Other configurations do not need to be changed.
Stream

getstream.io featured

Stream - Scalable APIs for Chat, Feeds, Moderation, & Video. Stream helps developers build engaging apps that scale to millions with performant and flexible Chat, Feeds, Moderation, and Video APIs and SDKs powered by a global edge network and enterprise-grade infrastructure.
Rafel-Rat

2 12 1,730 1.9 PHP

-------> RAFEL<------ Android Rat Written in Java With WebPanel For Controlling Victims...Hack Android Devices
phishing-frenzy

3 1 847 2.9 PHP

Ruby on Rails Phishing Framework
spamx

4 1 602 4.5 PHP

All In 1 Spam Tool For Termux Users Subscribe Us (Noob Hackers) some shit heads are trying to abuse this script so don't worry about them ...let them hallucinate ...but you are free to use this script
Kali-Linux-Tools-Interface

5 1 246 1.8 PHP

Graphical Web interface developed to facilitate the use of security information tools.
Gel4y-Mini-Shell-Backdoor

6 1 244 3.1 PHP

A webshell that can bypass some system security, all code has been obfuscated to bypass malware scans freely.
UnSAFE_Bank

7 1 158 0.0 PHP

Vulnerable Banking Suite
InfluxDB

www.influxdata.com featured

InfluxDB – Built for High-Performance Time Series Workloads. InfluxDB 3 OSS is now GA. Transform, enrich, and act on time series data directly in the database. Automate critical tasks and eliminate the need to move data externally. Download now.
sqli-postgres-rce-privesc-hacking-playground

8 1 76 0.0 PHP

Application with SQL Injection vulnerability and possible privilege escalation. Free vulnerable app for ethical hacking / penetration testing training.

NOTE: The open source projects on this list are ordered by number of github stars. The number of mentions indicates repo mentiontions in the last 12 Months or since we started tracking (Dec 2020).

PHP Hacking discussion

PHP Hacking related posts

cómo empezar en seguridad informática

2 projects | /r/devsarg | 17 Mar 2023
lucasfrag/Kali-Linux-Tools-Interface - Graphical Web interface developed to facilitate the use of security information tools.

1 project | /r/GithubSecurityTools | 3 Jul 2021

Index

What are some of the best open-source Hacking projects in PHP? This list will help you:

#	Project	Stars
1	DVWA	11,429
2	Rafel-Rat	1,730
3	phishing-frenzy	847
4	spamx	602
5	Kali-Linux-Tools-Interface	246
6	Gel4y-Mini-Shell-Backdoor	244
7	UnSAFE_Bank	158
8	sqli-postgres-rce-privesc-hacking-playground	76