SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Defensive mitigation and testing toolkit for PHP security vulnerabilities (CVE-2026-109618, CVE-2026-109619, CVE-2026-115560), including Apache protections and PHP hardening guidance
The PHP Unit Testing framework.
PHP Compatibility check for PHP_CodeSniffer
PHP Static Analysis Tool - discover bugs in your code without running it!
The elegant testing framework for PHP developers and AI agents.
Next-gen phpDoc parser with support for intersection types and generics
OWASP Mutillidae II is a free, open-source, deliberately vulnerable web application providing a target for web-security training. This is an easy-to-use web hacking environment designed for labs, security enthusiasts, classrooms, CTF, and vulnerability assessment tool targets.
The Phoronix Test Suite open-source, cross-platform automated testing/benchmarking software.
PHP Benchmarking framework
PAO is agent-optimized output for PHP testing tools.
A browser testing and web crawling library for PHP and Symfony
Provides utilities for PHPUnit, especially user deprecation notices management
Laravel Dusk provides simple end-to-end testing and browser automation.
Hashtopolis - distributed password cracking with Hashcat
A mail driver to quickly preview mail
A simple class to work with a temporary directory
Put your architectural rules under test!
A tool to automatically rerun PHPUnit tests when source code changes
Symfony extension for PHPStan
Pentesting and Bug Bounty Notes, Cheetsheets and Guide for Ethical Hacker, Whitehat Pentesters and CTF Players.
The easy and reliable way to test WordPress with Codeception. 10 years of proven success.
TCExam is a CBA (Computer-Based Assessment) system (e-exam, CBT - Computer Based Testing) for universities, schools and companies, that enables educators and trainers to author, schedule, deliver, and report on surveys, quizzes, tests and exams.
Test requests in Laravel without all the boilerplate.
Removes `final` and `readonly` keywords from source code on-the-fly and allows mocking of final methods and classes. It can be used together with any test tool such as PHPUnit or Mockery.
PHPUnit extensions and rules for PHPStan
Provides backwards compatibility for BrowserKit testing in the latest Laravel release.
Sorify - AI Agentic QA Platform for AI agents. E2E AI Testing - full user management, test runner, CI webhook, scheduler, notifications, MCP for test runs, create, management. With Chrome extension and MCP for recording events for AI to write tests.
A TIA plugin for PHPUnit
SMX Β· an open-source crypto paper-trading desk. Backtest farm, walk-forward optimizer, built-in AI agent, 110 exchanges, schema v2 strategies.
Full-stack testing PHP framework
:computer: Parallel testing for PHPUnit
PHP Mutation Testing library
Laravel Testing Helper for Packages Development
Doctrine extensions for PHPStan
Mockery is a simple yet flexible PHP mock object framework for use in unit testing with PHPUnit, PHPSpec or any other testing framework. Its core goal is to offer a test double framework with a succinct API capable of clearly defining all possible object operations and interactions using a human readable Domain Specific Language (DSL).
A way to test without writing actual testΒ cases
NeuraVision β AI content generation platform (PHP backend engine: auth, credits, generation, analytics)