A list of useful payloads and bypass for Web Application Security and Pentest/CTF
☆49Jul 15, 2019Updated 7 years ago
Alternatives and similar repositories for PayloadsAll
Users that are interested in PayloadsAll are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- A Simple Web Shell used for Remote Code Execution.☆11Aug 28, 2019Updated 7 years ago
- "Repeater" style XSS post-exploitation tool for mass browser control. Primarily a PoC to show why HttpOnly flag isn't a complete protecti…☆14Mar 4, 2017Updated 9 years ago
- A passive online scanner from OWTF☆16Feb 16, 2026Updated 8 months ago
- My Payload Collection (XSS,SQL ...)☆14Jul 17, 2018Updated 8 years ago
- PwnGIT is a semi-automated, feedback-driven tool to empower users to rapidly search through troves of public data on GitHub for sensitive…☆14Dec 17, 2020Updated 5 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- WPSeku - Wordpress Security Scanner☆51Sep 20, 2020Updated 6 years ago
- Bug Bounty Clipboard☆17Nov 6, 2019Updated 6 years ago
- Vue Advanced Search. Autocomplete search, Single & Multiple Select☆11Dec 12, 2022Updated 3 years ago
- Magento Security Scanner☆13Jan 10, 2022Updated 4 years ago
- Facebook Write-ups, PoC, and exploitation codes:☆29Jan 20, 2020Updated 6 years ago
- stdin writes to slack☆13Feb 8, 2020Updated 6 years ago
- LFI/RFI scanner by Iman Karim (fimap.dev@gmail.com)☆10Jul 3, 2015Updated 11 years ago
- SidePeek.js is a curated set of JavaScript payloads for browser-based recon. Run them in DevTools or as bookmarklets to uncover hidden AP…☆23May 13, 2025Updated last year
- Open Redirect Vulnerability scanner (Pwn0sec-Project)☆21Sep 19, 2020Updated 6 years ago
- Managed Database hosting by DigitalOcean • AdPostgreSQL, MySQL, MongoDB, Kafka, Valkey, and OpenSearch available. Automatically scale up storage and focus on building your apps.
- ☆16Oct 24, 2018Updated 8 years ago
- Boxer: A fast directory bruteforce tool written in Python with concurrency.☆14Feb 26, 2021Updated 5 years ago
- Firewall bypass script based on shodan search results☆14Jun 5, 2019Updated 7 years ago
- psychoPATH - hunting file uploads & LFI in the dark. This tool is a customisable payload generator designed for blindly detecting LFI & w…☆19Jun 28, 2018Updated 8 years ago
- Burp Intruder File Payload Generator☆18Oct 27, 2019Updated 7 years ago
- Source code for Tuts+ course☆10Dec 8, 2016Updated 9 years ago
- Payloads for SQLi☆20May 2, 2020Updated 6 years ago
- Burp Extension to auto renew OAuth bearer tokens. Can be adapted for any authorisation headers required for app testing☆11Aug 23, 2022Updated 4 years ago
- ☆11Jun 19, 2024Updated 2 years ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- List of special metadata IPs used in cloud services☆11Aug 9, 2019Updated 7 years ago
- rlyCTF (relay CTF) challenge to emulate real-world SSRF attacks.☆10Apr 13, 2019Updated 7 years ago
- MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners.☆126Apr 28, 2024Updated 2 years ago
- ☆20Aug 15, 2020Updated 6 years ago
- Hacking tools☆153Feb 11, 2025Updated last year
- Image Tragick Exploit Tool Using Burp Collaborator☆34May 24, 2024Updated 2 years ago
- Chrome extension which sets cookies in bulk from raw header text☆11Mar 2, 2023Updated 3 years ago
- Web Vulnerability Scanner using Shell Script☆59Jun 29, 2022Updated 4 years ago
- your bestfried for finding URLs of a target☆10Apr 5, 2023Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- This extension replaces the default repeater tab name with the URL path of the repeater request.☆25Sep 3, 2021Updated 5 years ago
- Explore a rich collection of diverse payloads in these GitHub repositories. 🚀☆12Apr 9, 2026Updated 6 months ago
- A tool for checking BigSpender vulnerability in your Bitcoin wallet☆39Mar 10, 2021Updated 5 years ago
- Docker Image for Oracle SQL*Plus☆10Nov 19, 2016Updated 9 years ago
- email scraper/crawls using python (Google/Bing)☆24May 11, 2020Updated 6 years ago
- 🔍 A simple tool to obtain long lists of ips from domains using goroutines☆26Jul 29, 2019Updated 7 years ago
- Using docker swarm creating the replica of account-service micro service and load balancing the requests using haproxy docker container (…☆14Apr 20, 2019Updated 7 years ago