SSTI – Advanced / Polyglot Payloads
☆39Jan 24, 2026Updated 9 months ago
Alternatives and similar repositories for ssti-advanced-payload-list
Users that are interested in ssti-advanced-payload-list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The primary goal of this project is to explain SQL Injection (one of the OWASP Top 10 vulnerabilities) and to provide a beneficial resour…☆155Jan 10, 2026Updated 9 months ago
- This project aims to provide a comprehensive resource for understanding and testing Cross-Site Scripting (XSS) vulnerabilities, one of th…☆204Jan 10, 2026Updated 9 months ago
- WAF Bypass Payload List☆19Jan 10, 2026Updated 9 months ago
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆25Apr 26, 2025Updated last year
- Command Injection Payload List☆116Jan 18, 2026Updated 9 months ago
- Managed hosting for WordPress and PHP on Cloudways • AdManaged hosting for WordPress, Magento, Laravel, or PHP apps, on multiple cloud providers. Deploy in minutes on Cloudways by DigitalOcean.
- GitHub Shortname Scanner is a tool that searches for filenames in public GitHub repositories based on a given keyword and generates a wor…☆12Feb 18, 2025Updated last year
- GitLab Unauthenticated Arbitrary File Read☆29Sep 28, 2026Updated last month
- Autonomous OSINT investigation tool — maps connections between people, companies, money and events into an interactive 3D graph. Built fo…☆21Apr 14, 2026Updated 6 months ago
- ☆17Sep 6, 2026Updated last month
- Reproducible PHP request-state RCE labs and self-checking PoC☆58Updated this week
- JoomSploit is a script designed to escalate a Cross-Site Scripting (XSS) vulnerability to Remote Code Execution (RCE) or other's critical…☆30Dec 19, 2023Updated 2 years ago
- Prompts for ChatGPT 4 useful for developers, cybersecurity professionals, hackers and IT workers☆14Mar 20, 2023Updated 3 years ago
- The wordlists that have been compiled using disclosed reports at HackerOne bug bounty platform☆10Jun 28, 2020Updated 6 years ago
- WayAI — Wayback & Common Crawl Recon (CLI + Web GUI)☆13Dec 28, 2025Updated 10 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- ☆12Oct 6, 2022Updated 4 years ago
- Just a bunch of useful scripts for netsec/admin/others☆19Dec 9, 2025Updated 10 months ago
- The most comprehensive Android & iOS security reference — tools, research papers, exploit techniques, platform internals, CTFs, and more.…☆19Apr 12, 2026Updated 6 months ago
- A small React + Vite + Tailwind tool to parse Next.js `_buildManifest.js` and list routes/files.☆13Aug 10, 2025Updated last year
- This Burp plugin allow copy all authentication headers by one click☆13Mar 23, 2026Updated 7 months ago
- ☆11Apr 8, 2024Updated 2 years ago
- this repo contains all nuclei templates for particular vulnerability that i used mosty while hunting..☆14Aug 15, 2024Updated 2 years ago
- Professional WAF security testing toolkit☆13Jun 5, 2026Updated 4 months ago
- Cockpit: Unauthenticated Remote Code Execution via SSH Command-Line Argument Injection☆15Apr 18, 2026Updated 6 months ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- NextForge — unified Next.js exploitation framework. RCE · SSRF · middleware · authorized lab only.☆17Sep 23, 2026Updated last month
- Local File Inclusion (LFI) scanner.☆12Aug 31, 2022Updated 4 years ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 10 months ago
- Bash script to manage insecure web apps using docker and hosts aliases for pentest practice☆38Updated this week
- Burp Suite extension for cross-identity & cross-tenant access-control testing — BAC, IDOR, BOLA, and privilege escalation.☆62Jul 12, 2026Updated 3 months ago
- Journey to learning frida android.☆10Apr 23, 2019Updated 7 years ago
- Some Templates for Bash Scripting☆18Sep 30, 2022Updated 4 years ago
- Most of the notes, resources and scripts I used to prepare for the HTB CPTS and "pass it the 2 time."☆88Jun 15, 2023Updated 3 years ago
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Aug 20, 2026Updated 2 months ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Chrome MV3 parameter/endpoint/secret harvester for authorized web security testing (GAP-style + Next.js RSC path maps)☆12Sep 9, 2026Updated last month
- Programs I Made while learning python for pentesters.☆21Aug 26, 2022Updated 4 years ago
- ☆15Nov 19, 2023Updated 2 years ago
- ☆16Jun 28, 2026Updated 4 months ago
- EXIF Tool Kit☆13Sep 3, 2023Updated 3 years ago
- Tool for fetching all the available waybackmachine snapshot urls☆27Oct 8, 2024Updated 2 years ago
- OpenSSH <=6.6 SFTP misconfiguration universal exploit☆27Mar 20, 2018Updated 8 years ago