A collection of PHP exploit scripts, found when investigating hacked servers. These are stored for educational purposes and to test fuzzers and vulnerability scanners. Feel free to contribute.

Yes, obviously. Don't copy them and store them on your own server. These are scripts found on hacked systems, so they're used to exploit the server and abuse some kind of vulnerability.

They are indeed dangerous in themselves. But if anyone can exploit a server or CMS, they can upload far more dangerous tools than these PHP scripts.

All obfuscated code has been run through the PHP Formatter or PHP Beatufier for readability (whichever was online at that time).