-
Notifications
You must be signed in to change notification settings - Fork 338
Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
- Loading branch information
Showing
1 changed file
with
27 additions
and
0 deletions.
There are no files selected for viewing
This file contains bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Original file line number | Diff line number | Diff line change |
---|---|---|
@@ -0,0 +1,27 @@ | ||
# PHP-Audit-Labs | ||
|
||
大家好,我们是红日安全-代码审计小组。此项目是关于代码审计的系列文章分享,还包含一个CTF靶场供大家练习,我们给这个项目起了一个名字叫 **PHP-Audit-Labs** ,希望对想要学习代码审计的朋友们有所帮助。 | ||
|
||
## Part1 | ||
|
||
Part1部分属于项目 **第一阶段** 的内容,本阶段的内容题目素材均来自 [PHP SECURITY CALENDAR 2017](https://www.ripstech.com/php-security-calendar-2017/) 。对于每一道题目,我们均给出对应的分析,并结合实际CMS进行解说。在文章的最后,我们还会留一道CTF题目,供大家练习,文章内容如下: | ||
|
||
* [ [红日安全]代码审计系列Day1 - in_array函数缺陷 ]() | ||
* [ [红日安全]代码审计系列Day2 - filter_var函数缺陷]() | ||
* [ [红日安全]代码审计系列Day3 - 实例化任意对象漏洞 ]() | ||
|
||
## Part2 | ||
|
||
* 待完善 | ||
|
||
## Part3 | ||
|
||
* 待完善 | ||
|
||
## Part4 | ||
|
||
* 待完善 | ||
|
||
## PHP-Audit-Labs题解 | ||
|
||
* 待完善 |