A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆11Aug 11, 2021Updated 5 years ago
Alternatives and similar repositories for PayloadsAllTheThings
Users that are interested in PayloadsAllTheThings are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- ☆40Mar 29, 2025Updated last year
- Hi everyone,☆61Jul 15, 2023Updated 3 years ago
- Top disclosed reports from HackerOne☆10Apr 15, 2021Updated 5 years ago
- SSH & FTP brute-forcing tool written in python☆11Oct 2, 2024Updated 2 years ago
- Motion Activated Security Camera based on Raspberry Pi 2/3/3B+. User can capture images or videos based on motion and email the captured …☆15Sep 28, 2020Updated 6 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- The repository contains IOCs in CSV format for APT, Cyber Crimes, Malware and Trojan and whatever I found as part of hunting and research☆12Jun 10, 2017Updated 9 years ago
- ☆18Apr 13, 2023Updated 3 years ago
- This repo offers comprehensive information, necessary tools, and instructional videos for beginners in Android penetration testing, provi…☆26Jun 12, 2023Updated 3 years ago
- Creates an ATT&CK Navigator map of an Adversary Emulation Plan☆17Sep 4, 2021Updated 5 years ago
- List of questions, answers and random notes for security interviews☆82May 7, 2021Updated 5 years ago
- C++ Code to perform a MiniDump of lsass.exe☆37Aug 2, 2023Updated 3 years ago
- ☆12Jul 30, 2026Updated 2 months ago
- RegStrike is a .reg payload generator☆58Sep 19, 2023Updated 3 years ago
- A Powershell script that looks for specific emails in an exchange users mailbox, downloads the attachments, then marks those emails as re…☆17Apr 22, 2024Updated 2 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A powerful tool to scan CRLF vulnerability written in Python☆15Oct 31, 2023Updated 2 years ago
- 100-Days-of-Hacking☆134Aug 24, 2023Updated 3 years ago
- Short script to decode output logs of *sslsplit* raw HTTP packets.☆17Aug 12, 2016Updated 10 years ago
- A lightweight JavaScript library for DrugWars☆14Mar 2, 2023Updated 3 years ago
- Banned word lists for use with Lithnet Password Protection for Active Directory☆13Jul 10, 2023Updated 3 years ago
- The Measure, Maximize, and Mature Threat-Informed Defense (M3TID) project defines what Threat-Informed Defense (TID) is and the key activ…☆17Jun 25, 2025Updated last year
- script python to check url list via cookies and Authorization☆19Feb 28, 2023Updated 3 years ago
- Tomcat backdoor based on CS blog☆29Jun 30, 2023Updated 3 years ago
- Autonomous red teaming and evidence-backed security evaluation for live AI agents.☆28Jul 22, 2026Updated 2 months ago
- Bare Metal GPUs on DigitalOcean Gradient AI • AdPurpose-built for serious AI teams training foundational models, running large-scale inference, and pushing the boundaries of what's possible.
- ☆14Mar 28, 2018Updated 8 years ago
- ☆19Jun 22, 2015Updated 11 years ago
- This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.☆16Aug 16, 2022Updated 4 years ago
- A collection of open source threat detection rules created by Cyber Castle's team.☆14Jun 2, 2022Updated 4 years ago
- Some scripts for Pwnagotchi☆21Jul 21, 2020Updated 6 years ago
- ☆19Apr 27, 2022Updated 4 years ago
- Port of Samy Kamkar's OpenSesame to Si4010☆24May 25, 2020Updated 6 years ago
- A tool to automate MS Direct Send emails☆21Mar 16, 2026Updated 7 months ago
- Generate a cross join, also known as a Cartesian product, from the lines of the specified files. This process is useful for creating fuzz…☆21Jun 29, 2023Updated 3 years ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- A tool to run and validate telemetry for Atomic Red Team tests☆17Mar 21, 2024Updated 2 years ago
- Production-grade Web Application Firewall testing tool. Detects Cloudflare, AWS WAF, Akamai & more. Identifies bypass vectors via URL nor…☆46Nov 17, 2025Updated 11 months ago
- Threat Modeling (based on STRIDE approach) for Kubernetes systems.☆26Oct 14, 2024Updated 2 years ago
- This repository contains combined exploits for two vulnerabilities in Moodle, a widely used open-source learning management system (LMS)☆18Mar 13, 2024Updated 2 years ago
- 基于JavaFX框架做的一款安卓漏洞分析桌面软件，采用了反编译技术与静态分析技术，上传apk包即可分析APP可能包含的风险。☆14Nov 23, 2022Updated 3 years ago
- Username lists that I created.☆17Aug 9, 2021Updated 5 years ago
- A curated list of tools for incident response☆35Mar 2, 2024Updated 2 years ago