---
id: 4824
title: "White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities"
source_domain: yeswehack.com
source_url: "https://www.yeswehack.com/learn-bug-bounty/white-box-penetration-testing-xdebug"
published_at: "2024-07-19T15:29:00Z"
tags: ["pentesting", "php", "docker", "debugging", "white-box", "xdebug"]
phying_url: "https://phying.com/item/4824"
lang: en
---

# White-box penetration testing with Xdebug: Debugging for PHP vulnerabilities

## Summary

Guide to white-box pentesting of PHP apps with Xdebug: setting up Docker and VS Code debugging to find file inclusion, regex errors and unsafe uploads, and craft new payloads.

## Intelligence Metadata

- **Sources:** yeswehack.com
- **Published:** 2024-07-19T15:29:00Z
- **Original:** https://www.yeswehack.com/learn-bug-bounty/white-box-penetration-testing-xdebug
- **Phying News:** https://phying.com/item/4824