SSTI – Advanced / Polyglot Payloads
☆30Jan 24, 2026Updated 7 months ago
Alternatives and similar repositories for ssti-advanced-payload-list
Users that are interested in ssti-advanced-payload-list are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- The primary goal of this project is to explain SQL Injection (one of the OWASP Top 10 vulnerabilities) and to provide a beneficial resour…☆125Jan 10, 2026Updated 8 months ago
- This project aims to provide a comprehensive resource for understanding and testing Cross-Site Scripting (XSS) vulnerabilities, one of th…☆173Jan 10, 2026Updated 8 months ago
- Command Injection Payload List☆86Jan 18, 2026Updated 8 months ago
- Caido plugin to send HTTP requests to external CLI security tools with preview, batch execution, and live output☆24Aug 20, 2026Updated last month
- ☆11Apr 8, 2024Updated 2 years ago
- End-to-end encrypted cloud storage - Proton Drive • AdSpecial offer: 40% Off Yearly / 80% Off First Month. Protect your most important files, photos, and documents from prying eyes.
- Complete PortSwigger Web Security Academy Lab Writeups Detailed, categorized solutions for every lab — from APPRENTICE to EXPERT — coveri…☆25Aug 1, 2026Updated last month
- Here's an updated Google Dorking list for 2025 Bug Bounty Hunting, incorporating new patterns and, the latest trends.☆20Apr 26, 2025Updated last year
- Generates a DEBUG PIN for flask applications based on Werkzeug☆20Nov 22, 2023Updated 2 years ago
- FWRF is a open source tool for firmware web-side analysis.☆11Aug 27, 2015Updated 11 years ago
- Bash script to manage insecure web apps using docker and hosts aliases for pentest practice☆38Jan 3, 2026Updated 8 months ago
- Precompiled binaries for various projects☆14Nov 6, 2020Updated 5 years ago
- EXIF Tool Kit☆12Sep 3, 2023Updated 3 years ago
- Pentester's toolbox☆12May 1, 2026Updated 4 months ago
- A Bof to dump domain credentials via DRSGetNCChanges, Created for use with the Adaptix C2.☆15Dec 16, 2025Updated 9 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- ysoserial.net docker image☆34Sep 23, 2024Updated last year
- C# implementation of the process injection techniques dubbed "PoolParty"☆17Nov 7, 2025Updated 10 months ago
- JS+ is a browser extension that captures JS URLs from specified domains and scans them with AI.☆23Mar 16, 2026Updated 6 months ago
- A malicious .cab creation tool for CVE-2021-40444☆11Sep 12, 2021Updated 5 years ago
- Security AI helper for Caido: pipes your local Claude Code / Gemini / Codex / Copilot CLI through 18 MCP tools for manual web security te…☆42Sep 2, 2026Updated 2 weeks ago
- The tool was created to assist with fuzzing and exploiting stack-based buffer overflows☆10Dec 29, 2020Updated 5 years ago
- Scrapy spider to recursively crawl for TOR hidden services☆11Oct 12, 2017Updated 8 years ago
- CVE-2026-46331☆31Jun 26, 2026Updated 2 months ago
- Shows the weather on the Lock Screen.☆12Jun 22, 2022Updated 4 years ago
- GPUs on demand by Runpod - Special Offer Available • AdRun AI, ML, and HPC workloads on powerful cloud GPUs—without limits or wasted spend. Deploy GPUs in under a minute and pay by the second.
- Fully local image generation for macOS and iOS☆13Mar 8, 2023Updated 3 years ago
- ☆11Aug 26, 2024Updated 2 years ago
- Google Dorks and keywords for bug hunters.☆16Aug 16, 2021Updated 5 years ago
- Dash rootkit. Linux Trojan Backdoor. (MALWARE)☆12Apr 3, 2023Updated 3 years ago
- XSSGAI is the first-ever AI-powered XSS (Cross-Site Scripting) payload generator. It leverages machine learning and deep learning to crea…☆43Feb 4, 2026Updated 7 months ago
- Bring back the old 90's floating speed ball to your Mac with some how morden design.☆15May 30, 2025Updated last year
- Abusing autoElevate - Fully Undetectable UAC Bypass exploit☆11Jul 15, 2022Updated 4 years ago
- Unified TUI for inventory, health-check, and track every API key issued across your AI providers.☆25Jul 22, 2026Updated last month
- DPAPI research and offensive tools☆17Feb 12, 2026Updated 7 months ago
- Proton VPN Special Offer - Get 70% off • AdSpecial partner offer. Trusted by over 100 million users worldwide. Tested, Approved and Recommended by Experts.
- KrbRelayUp - a universal no-fix local privilege escalation in windows domain environments where LDAP signing is not enforced (the default…☆14Jul 29, 2022Updated 4 years ago
- Makes the battery icon change color. Written in Swift with Orion.☆12Nov 26, 2021Updated 4 years ago
- ☆28Feb 10, 2026Updated 7 months ago
- C-based Linux Keylogger for educational purposes.☆17Oct 23, 2024Updated last year
- Dig through the Wayback Machine and find sensitive or forgotten files exposed by web servers over time.☆31Mar 27, 2025Updated last year
- ☆16Jun 5, 2024Updated 2 years ago
- react2shell CVE-2025-55182 PoC☆31Dec 7, 2025Updated 9 months ago