Find weak PHP checks that let wrong secrets pass.
Guides testing of PHP authentication and token checks for bypasses that make unequal values compare equal.
When to use it
Use when PHP authentication, signature checks, or token validation relies on loose equality, numeric coercion, or non-strict hash comparisons.
Give it PHP authentication or token-checking code; it assesses whether coercion lets unequal secrets or tokens compare equal.
What you provide
No setup requirements listed.
No additional actions listed.