Just a quick post to announce I've set up a GitHub repository with a collection of PHP backdoors for educational and/or testing purposes only:
Feel free to check it out and/or contribute here:
The repository will be updated continuously and gradually.
If you're interested in analysing a PHP backdoor, check out my post on PHP/C99shell:
C99Shell not dead
Additionally, find tools to deobfuscate PHP backdoors here: