Summary
PHP 类型杂耍（Type Juggling）和 Magic Hash 攻击方法论。当目标是 PHP 应用且存在密码比较、哈希校验、认证逻辑时使用。当看到 PHP `==` 松散比较、MD5/SHA1 哈希校验、strcmp 比较、JSON 输入处理、is_numeric 检查时必须使用。当错误登录泄露了输入的…
wgpsec/aboutsecurity
php-type-juggling
PHP 类型杂耍（Type Juggling）和 Magic Hash 攻击方法论。当目标是 PHP 应用且存在密码比较、哈希校验、认证逻辑时使用。当看到 PHP `==` 松散比较、MD5/SHA1 哈希校验、strcmp 比较、JSON 输入处理、is_numeric 检查时必须使用。当错误登录泄露了输入的…
Installation
$
npx skills add https://github.com/wgpsec/aboutsecurity
Similar popular skills
Related neighbors and high-traction skills in the same topics — useful to compare before installing.
type-juggling
Similar name
yaklang/hack-skills
>- PHP type juggling and weak comparison (`==`) bypass. Use when authentication, HMAC/signature…
2.9K installs
exploiting-type-juggling-vulnerabilities
Similar name
mukul975/anthropic-cybersecurity-skills
Exploits PHP type juggling vulnerabilities caused by loose (==) comparison operators to bypass …
164 installsAlso in this package
Other skills from wgpsec/aboutsecurity · top by installs.
npx skills add https://github.com/wgpsec/aboutsecurity
More details
Agent compatibility
Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.
Claude Code
Not declared
Cursor
Not declared
Codex
Not declared
GitHub Copilot
Not declared
Windsurf
Not declared
Gemini CLI
Not declared
Cline
Not declared
OpenCode
Not declared
Repository health
Stars
1.7K
Default branch
master
Open issues
0
Status
Active
History
- First seen on skills.sh
- First recorded snapshot · 16 installs