Audit Learning

Audit-Learning

I have opened a new pit. I am going to spend a month summarizing the code auditing knowledge I have learned and continue to update it. Welcome all the masters to star for your support.

Todo

• open_basedir bypass research
• allow_url_fopen and allow_url_include
• Wide byte injection and database encoding analysis
• General code audit ideas
• Dangerous file_put_contents function
• escapeshellarg and escapeshellcmd functions.md
• parse_url function research
• other
• Special file name writing techniques (move_uploaded_file, file_put_contents, copy, readfile, file, fopen all exist)
• mail function command execution
• disable_functions bypass research
• curl function research
• addslashes function bypass research
• move_uploaded_file
• Security issues caused by the default configuration of other PHP functions
• Vulnerabilities caused by misuse of htmlentities function (http://sec-redclub.com/archives/964/)
• filter_var function defect (http://sec-redclub.com/archives/925/)

some resources

Code audit practice questions

https://github.com/CHYbeta/Code-Audit-Challenges

Master wonderkun’s CTF web exercises: https://github.com/wonderkun/CTF_web

https://github.com/bowu678/php_bugs

RIPS2017 code audit exercise oj: https://www.ripstech.com/php-security-calendar-2017/

Solution to the problem in Hongri Security RIPS oj: https://github.com/hongriSec/PHP-Audit-Labs

Vulnerability exploit

Recommend a wave of your own warehouse: https://github.com/jiangsir404/PHP-code-audit

Vulnerabilities and EXP of various open source CMS versions: https://github.com/Mr5m1th/0day

CMS vulnerability test case collection: https://github.com/SecWiki/CMS-Hunter

dark clouds

1000 PHP code audit cases compiled by Xyntax master: https://github.com/Xyntax/1000php

Wuyun Drops article backup: https://github.com/SecWiki/wooyun_articles

php_code_audit_project: https://github.com/SukaraLin/php_code_audit_project

Mind map, information collection

Compilation of Web learning materials by master cheybeta: https://github.com/CHYbeta/Web-Security-Learning

https://github.com/CHYbeta/phith0n-Mind-Map

https://github.com/bit4woo/code2sec.com

Python code audit: https://github.com/bit4woo/python_sec

Advanced PHP application vulnerability audit technology (by Hei Ge) https://github.com/Jyny/pasc2at

blog

Farewell Song: https://www.leavesongs.com/

Vulnerability Times: http://0day5.com/

Master lorexxar: http://lorexxar.cn/

Know Chuangyu paper: https://paper.seebug.org/

books

"Code Audit"

"PHP7 Kernel Analysis" https://github.com/pangudashu/php7-internal

"In-depth understanding of the PHP kernel" https://github.com/reeze/tipi

Code audit tool

cobra: https://github.com/wufeifei/cobra

Seay source code audit system 2.1: http://www.cnseay.com/

rips: https://github.com/ripsscanner/rips