Various interesting papers and documents.

Name Size
A static source code analyser for vulnerabilities in PHP scripts - Johannes Dahse.pdf 311.3Ko
Code Reuse Attacks in PHP: Automated POP Chain Generation - Johannes Dahse, Nikolai Krein, and Thorsten Holz - ACM CCS 2014.pdf 421.3Ko
Shocking News in PHP Exploitation - Stefan Esser - PoC 2009.pdf 0.65Mo
State of the Art Post Exploitation in Hardened PHP Environments - Blackhat 2009 - Stefan Esser.pdf 1.04Mo
Static Detection of Vulnerabilities in Modern PHP Applications - Johannes Dahse - HackPra 2014.pdf 2.51Mo