Alternatives and similar repositories for payloads

Users that are interested in payloads are comparing it to the libraries listed below

• 1N3 / IntruderPayloads
  A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and…
  ☆3,872Updated 4 years ago
• nixawk / pentest-wiki
  PENTEST-WIKI is a free online security knowledge library for pentesters / researchers. If you have a good idea, please share it with othe…
  ☆3,663Updated 2 years ago
• toolswatch / blackhat-arsenal-tools
  Official Black Hat Arsenal Security Tools Repository
  ☆4,173Updated last year
• qazbnm456 / awesome-cve-poc
  ✍️ A curated list of CVE PoCs.
  ☆3,455Updated 3 years ago
• coreb1t / awesome-pentest-cheat-sheets
  Collection of the cheat sheets useful for pentesting
  ☆4,186Updated last year
• michenriksen / aquatone
  A Tool for Domain Flyovers
  ☆5,885Updated 3 years ago
• snoopysecurity / awesome-burp-extensions
  A curated list of amazingly awesome Burp Extensions
  ☆3,319Updated 9 months ago
• EdOverflow / bugbounty-cheatsheet
  A list of interesting payloads, tips and tricks for bug bounty hunters.
  ☆6,308Updated 2 years ago
• ngalongc / bug-bounty-reference
  Inspired by https://github.com/djadmin/awesome-bug-bounty, a list of bug bounty write-up that is categorized by the bug nature
  ☆4,031Updated last year
• fuzzdb-project / fuzzdb
  Dictionary of attack patterns and primitives for black-box application fault injection and resource discovery.
  ☆8,746Updated 2 years ago
• commixproject / commix
  Automated All-in-One OS Command Injection Exploitation Tool.
  ☆5,536Updated this week
• leebaird / discover
  Custom bash scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload cre…
  ☆3,768Updated 3 weeks ago
• xmendez / wfuzz
  Web application fuzzer
  ☆6,339Updated last year
• epinna / tplmap
  Server-Side Template Injection and Code Injection Detection and Exploitation Tool
  ☆4,078Updated last year
• yeyintminthuhtut / Awesome-Red-Teaming
  List of Awesome Red Teaming Resources
  ☆7,605Updated last year
• codingo / NoSQLMap
  Automated NoSQL database enumeration and web application exploitation tool.
  ☆3,191Updated 3 months ago
• urbanadventurer / WhatWeb
  Next generation web scanner
  ☆6,223Updated last month
• lanjelot / patator
  Patator is a multi-purpose brute-forcer, with a modular design and a flexible usage.
  ☆3,810Updated 6 months ago
• 0xInfection / Awesome-WAF
  Everything about Web Application Firewalls (WAFs) from Security Standpoint! 🔥
  ☆6,976Updated 3 months ago
• 1N3 / Sn1per
  Attack Surface Management Platform
  ☆9,244Updated 2 months ago
• almandin / fuxploider
  File upload vulnerability scanner and exploitation tool.
  ☆3,279Updated 6 months ago
• epinna / weevely3
  Weaponized web shell
  ☆3,420Updated 2 months ago
• gwen001 / pentest-tools
  A collection of custom security tools for quick needs.
  ☆3,262Updated 2 years ago
• guelfoweb / knock
  Knock Subdomain Scan
  ☆4,100Updated last month
• EnableSecurity / wafw00f
  WAFW00F allows one to identify and fingerprint Web Application Firewall (WAF) products protecting a website.
  ☆6,027Updated 2 months ago
• XiphosResearch / exploits
  Miscellaneous exploit code
  ☆1,565Updated 2 years ago
• s0md3v / AwesomeXSS
  Awesome XSS stuff
  ☆5,033Updated last year
• djadmin / awesome-bug-bounty
  A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.
  ☆5,224Updated last year
• The-Z-Labs / linux-exploit-suggester
  Linux privilege escalation auditing tool
  ☆6,287Updated last year
• RedSiege / EyeWitness
  EyeWitness is designed to take screenshots of websites, provide some server header info, and identify default credentials if possible.
  ☆5,530Updated 3 weeks ago