foospidy / payloadsLinks
Git All the Payloads! A collection of web attack payloads.
☆3,882Updated 2 years ago
Alternatives and similar repositories for payloads
Users that are interested in payloads are comparing it to the libraries listed below
Sorting:
- A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…☆3,892Updated 4 years ago
- PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with othe…☆3,694Updated 2 years ago
- A curated list of amazingly awesome Burp Extensions☆3,354Updated 11 months ago
- Automated All-in-One OS Command Injection Exploitation Tool☆5,594Updated last week
- ✍️ A curated list of CVE PoCs.☆3,476Updated 4 years ago
- Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload cre…☆3,808Updated this week
- Attack Surface Management Platform☆9,350Updated 2 weeks ago
- Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature☆4,051Updated last year
- Collection of the cheat sheets useful for pentesting☆4,242Updated last year
- Official Black Hat Arsenal Security Tools Repository☆4,216Updated last year
- List of Awesome Red Teaming Resources☆7,724Updated 2 years ago
- A Tool for Domain Flyovers☆5,892Updated 3 years ago
- A list of interesting payloads, tips and tricks for bug bounty hunters.☆6,356Updated 2 years ago
- Next generation web scanner☆6,376Updated 3 months ago
- Automated NoSQL database enumeration and web application exploitation tool.☆3,219Updated 5 months ago
- File upload vulnerability scanner and exploitation tool.☆3,294Updated 8 months ago
- This repository contains cutting-edge open-source security tools (OST) for a red teamer and threat hunter.☆10,090Updated 4 months ago
- Web application fuzzer☆6,384Updated last week
- The Penetration Testers Framework (PTF) is a way for modular support for up-to-date tools.☆5,473Updated last year
- Server-Side Template Injection and Code Injection Detection and Exploitation Tool☆4,111Updated last year
- Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.☆3,839Updated 8 months ago
- Weaponized web shell☆3,473Updated 3 months ago
- Advanced vulnerability scanning with Nmap NSE☆3,706Updated last year
- EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.☆5,616Updated 3 weeks ago
- Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.☆8,790Updated 2 years ago
- List of Awesome Asset Discovery Resources☆2,297Updated last year
- An Information Security Reference That Doesn't Suck; https://rmusser.net/git/admin-2/Infosec_Reference for non-MS Git hosted version.☆5,876Updated 3 months ago
- WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.☆6,137Updated last week
- The Bug Hunters Methodology☆4,231Updated 2 years ago
- Knock Subdomain Scan☆4,124Updated 3 months ago