A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆67Apr 18, 2021Updated 5 years ago
Alternatives and similar repositories for PayloadsAllTheThings
Users that are interested in PayloadsAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Automate installation of extra pentest tools on Kali Linux☆68Apr 18, 2021Updated 5 years ago
- CTF toolbox☆23Feb 14, 2021Updated 5 years ago
- A Powerful Intruder written in Python☆24Nov 18, 2021Updated 4 years ago
- 🔍 A collection of interesting, funny, and depressing search queries to plug into https://shodan.io/ 👩💻☆26Oct 19, 2019Updated 6 years ago
- Generate common Reverse Shells for Pentesting☆47May 23, 2021Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Browse the web entirely over SMS — no apps required.☆15Oct 6, 2014Updated 12 years ago
- This tool was created to automatically send 53 different types of USPS branded boxes, with the maximum quantities to any address (about 5…☆36Nov 6, 2020Updated 5 years ago
- Stuff about it-security that might be good to know☆26Oct 20, 2019Updated 6 years ago
- privilege escalation by piggy-backing user sudo requests☆15Feb 6, 2023Updated 3 years ago
- qFlipper — desktop application for updating Flipper Zero firmware via PC☆20Mar 12, 2022Updated 4 years ago
- Remake of CVE-2020-9484 by Pentestical☆26Sep 16, 2024Updated 2 years ago
- Playground (and dump) of stuff I make or modify for the Flipper Zero☆99Oct 27, 2022Updated 3 years ago
- Tampermonkey Script - Amazon Giveaways☆17Dec 6, 2018Updated 7 years ago
- All the deals for InfoSec related software/tools this Black Friday☆17Nov 25, 2023Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- documentations, slides decks...☆22Sep 24, 2024Updated 2 years ago
- AutoRecon is a multi-threaded network reconnaissance tool which performs automated enumeration of services.☆20Oct 27, 2019Updated 6 years ago
- SSH Honeypot that gathers creds and attempted commands☆19Apr 19, 2021Updated 5 years ago
- Xfinity / Comcast Wordlist Generator☆86Mar 24, 2023Updated 3 years ago
- SuperVision is an open source "Google Maps" for hackers developed by CosmodiumCS. SuperVision's map centralizes public data and maps it. …☆59Feb 7, 2024Updated 2 years ago
- ☆33Sep 19, 2020Updated 6 years ago
- Apple BLE proximity pairing message spoofing☆26Sep 21, 2023Updated 3 years ago
- Spoof Calls For Free - Unlimited Usage☆141Nov 14, 2021Updated 4 years ago
- capNcook - a dark web exploration tool☆87Apr 6, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- An evil RMI server that can launch an arbitrary command. May be useful for CVE-2021-44228☆12Dec 12, 2021Updated 4 years ago
- Network brute force tool, written in Python. Faster than other existing solutions (including the main leader in the network brute force m…☆431Aug 22, 2021Updated 5 years ago
- Bookmarklet to find endpoints easily with one click☆94May 19, 2024Updated 2 years ago
- ☆19Jul 5, 2026Updated 3 months ago
- little helping scripts that I use daily☆11Aug 30, 2021Updated 5 years ago
- The all-in-one Red Team extension for Web Pentester. Added more functionality☆18Dec 21, 2021Updated 4 years ago
- Hosted Reverse Shell generator with a ton of functionality. -- (Great for CTFs)☆4,078Apr 27, 2026Updated 5 months ago
- CTF toolbox☆23Apr 2, 2023Updated 3 years ago
- Extracts faces from youtube videos☆20Nov 7, 2023Updated 2 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- A reverse shell in PHP using Unicode encoding as variable assignment☆19Mar 8, 2021Updated 5 years ago
- A generator of weird files (binary polyglots, near polyglots...)☆15Sep 24, 2024Updated 2 years ago
- ☆16Dec 16, 2021Updated 4 years ago
- ITS POWER FULL HACKING TOOL☆13Jan 12, 2024Updated 2 years ago
- DuckyScript interpreter in CircuitPython (Tested on Pico)☆11May 14, 2021Updated 5 years ago
- Tryhackme rooms & tools☆64May 22, 2020Updated 6 years ago
- A couple of different scripts, made to automate attacks against NoSQL databases.☆67Mar 13, 2024Updated 2 years ago