These are payloads to hunt for various bugs in web applications. from SQLi, xss, RCE to path traversal and more with XSS and fuzzing.
☆11Oct 3, 2020Updated 5 years ago
Alternatives and similar repositories for allpayloads
Users that are interested in allpayloads are comparing it to the libraries listed below
Sorting:
- ☆11Dec 5, 2020Updated 5 years ago
- my templates for the nuclei engine to find security vulnerabilities.☆10Aug 19, 2024Updated last year
- Funny Fuzzing Wordlist☆14Jun 14, 2022Updated 3 years ago
- Nuclei templates which I wrote myself☆10Jan 8, 2022Updated 4 years ago
- Burp Suite Extensions☆12Oct 19, 2021Updated 4 years ago
- ☆13Mar 15, 2022Updated 3 years ago
- My gfPatterns☆15Aug 31, 2021Updated 4 years ago
- all manner of wordlists☆24Jan 19, 2022Updated 4 years ago
- Collection of templates (nuclei/jaeles..)☆16Jun 9, 2021Updated 4 years ago
- This includes all the templates of nuclei collected from different sources☆18Dec 30, 2022Updated 3 years ago
- ☆21Dec 15, 2020Updated 5 years ago
- Nuclei Templates☆14Jan 13, 2023Updated 3 years ago
- Automated Recon Tool Installer☆15Jun 29, 2022Updated 3 years ago
- My configs, tools and what not. For everytime that I blow up my vm....☆18Jan 21, 2020Updated 6 years ago
- Optimized WordLists for Pentesting☆16Feb 6, 2020Updated 6 years ago
- Collection of nmap nse scripts☆23May 15, 2019Updated 6 years ago
- ☆20May 25, 2025Updated 9 months ago
- A tool to exploit imagetragick vulnerability to gain remote code execution☆20Dec 20, 2017Updated 8 years ago
- Wordlists for Bug Bounty☆23Aug 18, 2019Updated 6 years ago
- Literally spray blind xss payloads everywhere.☆26Feb 22, 2022Updated 4 years ago
- Bug Bounty Recon wordlist Generator☆21Jul 17, 2020Updated 5 years ago
- Wordlist to get files/ folders listed by the app that may expose passwords, sensitive file or folders☆22Jul 10, 2020Updated 5 years ago
- Burp Suite extension to log GraphQL operations as a comment☆23Aug 9, 2021Updated 4 years ago
- Burp Extension to identify PII data☆21Jan 29, 2021Updated 5 years ago
- Scanner for Log4j RCE CVE-2021-44228☆11Jul 6, 2022Updated 3 years ago
- ☆21Dec 4, 2014Updated 11 years ago
- It contain google dork to find the wsdl file.☆13May 27, 2020Updated 5 years ago
- Shodan Favicon Hash Generator By Aziz Hakim @eternyle☆26May 25, 2024Updated last year
- VMware Workspace ONE Access and Identity Manager RCE via SSTI - Test script for shodan, file or manual.☆16Feb 13, 2024Updated 2 years ago
- 判断是否使用shiro的burp插件☆10Nov 11, 2020Updated 5 years ago
- Collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, …☆27May 9, 2022Updated 3 years ago
- Magic Header Blind Xss tool (deliver blind xss payloads in request headers).☆25May 30, 2021Updated 4 years ago
- Top level domain scanner in Go☆30Sep 24, 2023Updated 2 years ago
- Tool for checking reflecting Parameters in a URL.☆10Aug 31, 2020Updated 5 years ago
- Python Script to Print the name of the companies that are acquired by a Target Company and the Time of Acquisition.☆26Dec 5, 2021Updated 4 years ago
- A parallel scanner that utilises axiom to spin up servers and parallel scan using masscan.☆16Jul 1, 2020Updated 5 years ago
- Every Nuclei template that has ever appeared on Github☆36Jun 2, 2022Updated 3 years ago
- External NSE script library (Collection of unofficial scripts) - Feel free to submit your NSE scripts!☆33Jan 5, 2022Updated 4 years ago
- Many yaml scanner plugin parser [nuclei-template, xray-poc, ez-poc] - for Python☆13Mar 27, 2022Updated 3 years ago