A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆55Mar 30, 2021Updated 5 years ago
Alternatives and similar repositories for PayloadsAllTheThings
Users that are interested in PayloadsAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts useful in cracking the Vulnhub Lab named View2aKill: 1☆28Feb 1, 2020Updated 6 years ago
- This repository contains the files that provide the upload functionality in the IIS Server☆40Aug 4, 2021Updated 5 years ago
- Notes only☆23May 2, 2022Updated 4 years ago
- This cheasheet is aimed at the Red Teamers to help them find diffent tools and methods to create a Commmand and Control Server and exploi…☆90Nov 7, 2020Updated 5 years ago
- Collection of useful pre-compiled .NET binaries or other executables for penetration testing Windows Active Directory environments☆14Aug 2, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆168Mar 14, 2026Updated 7 months ago
- ☆32Jun 19, 2025Updated last year
- ☆216Mar 14, 2026Updated 7 months ago
- ☆364Mar 14, 2026Updated 7 months ago
- ☆270Mar 14, 2026Updated 7 months ago
- This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential A…☆502Mar 14, 2026Updated 7 months ago
- ☆446Oct 23, 2022Updated 4 years ago
- This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap."☆812May 29, 2026Updated 5 months ago
- ☆19Mar 14, 2026Updated 7 months ago
- Managed Kubernetes at scale on DigitalOcean • AdDigitalOcean Kubernetes includes the control plane, bandwidth allowance, container registry, automatic updates, and more for free.
- This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.☆847Mar 14, 2026Updated 7 months ago
- This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on…☆1,265Oct 23, 2022Updated 4 years ago
- This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 …☆2,624Mar 14, 2026Updated 7 months ago
- This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficu…☆1,841Mar 14, 2026Updated 7 months ago
- This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.☆3,646Mar 14, 2026Updated 7 months ago
- Fback is a tool that helps you create target-specific wordlists using a .json pattern.☆63Nov 21, 2025Updated 11 months ago
- The Last Web Recon Tool You'll Need☆17Nov 7, 2020Updated 5 years ago
- Autorev.sh generates reverse shell codes for reverse shell . Supports linux and windows☆17Apr 8, 2022Updated 4 years ago
- Subdomain enumeration using Cloudflare's scanning tool.☆48Jul 11, 2025Updated last year
- Simple, predictable pricing with DigitalOcean hosting • AdAlways know what you'll pay with monthly caps and flat pricing. Enterprise-grade infrastructure trusted by 600k+ customers.
- Creating an ATT&CK Navigator layer with the detection coverage of the signals available within Tanium Threat Response.☆11Jun 2, 2021Updated 5 years ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆16Nov 24, 2025Updated 11 months ago
- bWAPP Docker image based on raesene/bWAPP and mattrayner/lamp☆11Dec 10, 2019Updated 6 years ago
- This script is used to search for cloud certificate entities such as Amazon, Azure, and others that have been extracted by the kaeferjaeg…☆56Nov 21, 2025Updated 11 months ago
- My dotfiles and bash configuration☆13Nov 6, 2024Updated last year
- A Python tool for exploiting Django RCE via deserialization vulnerabilities in session cookies, allowing remote code execution through fo…☆20Nov 21, 2025Updated 11 months ago
- Short script to decode output logs of *sslsplit* raw HTTP packets.☆17Aug 12, 2016Updated 10 years ago
- ☆24Feb 7, 2025Updated last year
- Leaked? 1.1 - A Checking tool for Hash codes and Passwords leaked☆16Sep 3, 2018Updated 8 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ADLC Triad governance template for AI agent-assisted development☆24Jun 28, 2026Updated 4 months ago
- This repository will contain many mindmaps for cyber security technologies, methodologies, courses, and certifications in a tree structur…☆9,409Jul 21, 2026Updated 3 months ago
- Subdomain crawler with wordlist using python☆15Mar 22, 2020Updated 6 years ago
- Compiler for the Jack Programming Language☆20Nov 5, 2024Updated last year
- just a little treasure chest of stuff I need to watch / read later☆33Mar 26, 2021Updated 5 years ago
- Burp Suite Professional Edition .☆20Jul 24, 2025Updated last year
- Subdomain Scan (knockpy) in Python3☆14Oct 4, 2020Updated 6 years ago