A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆55Mar 30, 2021Updated 5 years ago
Alternatives and similar repositories for PayloadsAllTheThings
Users that are interested in PayloadsAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Scripts useful in cracking the Vulnhub Lab named View2aKill: 1☆28Feb 1, 2020Updated 6 years ago
- This repository contains the PowerShell script for adding and removing the Sticky Key backdoor on Windows☆38May 18, 2020Updated 6 years ago
- Notes only☆23May 2, 2022Updated 4 years ago
- This repository contains the files that provide the upload functionality in the IIS Server☆39Aug 4, 2021Updated 5 years ago
- This cheasheet is aimed at the Red Teamers to help them find diffent tools and methods to create a Commmand and Control Server and exploi…☆90Nov 7, 2020Updated 5 years ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- ☆168Mar 14, 2026Updated 6 months ago
- ☆270Mar 14, 2026Updated 6 months ago
- ☆32Jun 19, 2025Updated last year
- ☆216Mar 14, 2026Updated 6 months ago
- This cheatsheet is aimed at the CTF Players and Beginners to help them understand Web Application Vulnerablity with examples.☆486Mar 14, 2026Updated 6 months ago
- ☆445Oct 23, 2022Updated 3 years ago
- This cheatsheet is aimed at the Red Teamers to help them understand the fundamentals of Credential Dumping (Sub Technique of Credential A…☆502Mar 14, 2026Updated 6 months ago
- This cheatsheet was created to assist Red Teamers and Penetration Testers in hunting down vulnerabilities using "Nmap."☆813May 29, 2026Updated 4 months ago
- This cheatsheet is aimed at the OSCP aspirants to help them understand the various methods of Escalating Privilege on Linux based Machine…☆996Mar 14, 2026Updated 6 months ago
- Deploy open-source AI quickly and easily - Special Bonus Offer • AdRunpod Hub is built for open source. One-click deployment and autoscaling endpoints without provisioning your own infrastructure.
- High quality and text versions of cheat sheets from Cyber Detective Twitter☆46May 1, 2024Updated 2 years ago
- This cheasheet is aimed at the CTF Players and Beginners to help them sort the CTF Challenges on the basis of Difficulties.☆842Mar 14, 2026Updated 6 months ago
- This cheasheet is aimed at the CTF Players and Beginners to help them sort Vulnhub Labs. This list contains all the writeups available on…☆1,261Oct 23, 2022Updated 3 years ago
- This cheatsheet is built for the Bug Bounty Hunters and penetration testers in order to help them hunt the vulnerabilities from P4 to P1 …☆2,612Mar 14, 2026Updated 6 months ago
- This cheasheet is aimed at the CTF Players and Beginners to help them sort Hack The Box Labs on the basis of Operating System and Difficu…☆1,835Mar 14, 2026Updated 6 months ago
- Curated list of public penetration test reports released by several consulting firms and academic security groups☆15Dec 14, 2019Updated 6 years ago
- 😎 Curated list of awesome programming podcasts, organized alphabetically & topically☆31Oct 28, 2017Updated 8 years ago
- ☆43Dec 24, 2024Updated last year
- My dotfiles and bash configuration☆13Nov 6, 2024Updated last year
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Autorev.sh generates reverse shell codes for reverse shell . Supports linux and windows☆17Apr 8, 2022Updated 4 years ago
- A repository of curated lists with elements such as IoCs to use for threat hunting & detection queries.☆35Jul 23, 2024Updated 2 years ago
- ☆73Oct 28, 2020Updated 5 years ago
- SelfHosted - Bug Bounty Programs | Discover new and fresh bug bounty programs across platforms. Updated frequently to always display the …☆15Nov 24, 2025Updated 10 months ago
- bWAPP Docker image based on raesene/bWAPP and mattrayner/lamp☆11Dec 10, 2019Updated 6 years ago
- Short script to decode output logs of *sslsplit* raw HTTP packets.☆17Aug 12, 2016Updated 10 years ago
- Subdomain crawler with wordlist using python☆15Mar 22, 2020Updated 6 years ago
- ☆22Oct 30, 2022Updated 3 years ago
- ☆19Mar 14, 2026Updated 6 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- This is check50, a command-line program with which you can check the correctness of your programs.☆13Nov 13, 2021Updated 4 years ago
- 🔥 CEHv12 Certificate documentation 📚☆11Jun 29, 2023Updated 3 years ago
- Fback is a tool that helps you create target-specific wordlists using a .json pattern.☆63Nov 21, 2025Updated 10 months ago
- Scrape emails, phone numbers and social media accounts from a website. You can use the found information to gather more information or ju…☆19Dec 6, 2021Updated 4 years ago
- Leaked? 1.1 - A Checking tool for Hash codes and Passwords leaked☆15Sep 3, 2018Updated 8 years ago
- ☆50Jan 1, 2018Updated 8 years ago
- Subdomain Scan (knockpy) in Python3☆13Oct 4, 2020Updated 6 years ago