A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆50Mar 30, 2021Updated 5 years ago
Alternatives and similar repositories for PayloadsAllTheThings
Users that are interested in PayloadsAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This repository contains the PowerShell script for adding and removing the Sticky Key backdoor on Windows☆36May 18, 2020Updated 5 years ago
- Notes only☆20May 2, 2022Updated 3 years ago
- This repository contains the files that provide the upload functionality in the IIS Server☆36Aug 4, 2021Updated 4 years ago
- This cheasheet is aimed at the Red Teamers to help them find diffent tools and methods to create a Commmand and Control Server and exploi…☆85Nov 7, 2020Updated 5 years ago
- ☆26Jun 19, 2025Updated 9 months ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- ☆362Mar 14, 2026Updated last month
- ☆258Mar 14, 2026Updated last month
- ☆212Mar 14, 2026Updated last month
- ☆354Mar 14, 2026Updated last month
- ☆443Oct 23, 2022Updated 3 years ago
- This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential A…☆494Mar 14, 2026Updated last month
- This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap."☆759Mar 14, 2026Updated last month
- This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machine…☆880Mar 14, 2026Updated last month
- High quality and text versions of cheat sheets from Cyber Detective Twitter☆39May 1, 2024Updated last year
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.☆827Mar 14, 2026Updated last month
- This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 …☆2,494Mar 14, 2026Updated last month
- Curated list of public penetration test reports released by several consulting firms and academic security groups☆14Dec 14, 2019Updated 6 years ago
- ☆42Dec 24, 2024Updated last year
- This cheasheet is aimed at the CTF Players and Beginners to help them understand the fundamentals of Privilege Escalation with examples.☆3,577Mar 14, 2026Updated last month
- Autorev.sh generates reverse shell codes for reverse shell . Supports linux and windows☆17Apr 8, 2022Updated 4 years ago
- Subdomain enumeration using Cloudflare's scanning tool.☆47Jul 11, 2025Updated 9 months ago
- Short script to decode output logs of *sslsplit* raw HTTP packets.☆17Aug 12, 2016Updated 9 years ago
- ☆72Oct 28, 2020Updated 5 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- bWAPP Docker image based on raesene/bWAPP and mattrayner/lamp☆12Dec 10, 2019Updated 6 years ago
- Subdomain crawler with wordlist using python☆14Mar 22, 2020Updated 6 years ago
- ☆24Feb 7, 2025Updated last year
- 🔥 CEHv12 Certificate documentation 📚☆11Jun 29, 2023Updated 2 years ago
- Open Redirect Vulnerability Payload List☆10Feb 23, 2021Updated 5 years ago
- The state of the art network attack and monitoring framework.☆17Mar 5, 2018Updated 8 years ago
- Subdomain Scan (knockpy) in Python3☆13Oct 4, 2020Updated 5 years ago
- simple bash script to earn bounties☆36Apr 27, 2024Updated last year
- ☆49Jan 1, 2018Updated 8 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- ☆10Mar 15, 2026Updated 3 weeks ago
- Google Dorking Payloads☆12Jun 24, 2024Updated last year
- A swiss army knife for pentesting networks☆24Mar 16, 2023Updated 3 years ago
- Fuzz for hidden proxies, vhosts, and URLs☆15Apr 1, 2026Updated last week
- This repo is just a guide where you can find all labs of burp suite resolved, you can see the workflow and all type of web attacks☆14Mar 29, 2022Updated 4 years ago
- My curated list of resources for OSCP preperation☆264Nov 13, 2023Updated 2 years ago
- Todos los comandos necesarios para aprobar el eJPT☆13Sep 28, 2021Updated 4 years ago