This repository contains payloads which are listed by swisskyrepo/PayloadAllTheThings and many of my own crafted payloads for each of the web attacking domain
☆38Jun 26, 2024Updated 2 years ago
Alternatives and similar repositories for web-payloads
Users that are interested in web-payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Tools for generating and validating IBANs (International Bank Account Numbers)☆10Aug 11, 2020Updated 6 years ago
- Contain code referred in https://www.securityinbits.com/☆13Dec 31, 2019Updated 6 years ago
- Work in Progress. RAT written in C++ using wxWidgets☆11Sep 13, 2019Updated 7 years ago
- Bruteratel☆14Oct 26, 2022Updated 4 years ago
- Anti-forensics tool Inspired by NSA's Marble framework.☆11Apr 17, 2025Updated last year
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- **CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger a…☆16Feb 26, 2026Updated 8 months ago
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆17Oct 19, 2025Updated last year
- ☆18Sep 2, 2021Updated 5 years ago
- Crypter thingy I made for avoiding automated anti-malware environments. This is to be used for EDUCATIONAL PURPOSES ONLY.☆13Sep 6, 2019Updated 7 years ago
- Spoof parent process ID☆14Jan 23, 2019Updated 7 years ago
- With this RunPE you can easily inject your payload in any x86 or x64 program.☆16Jun 3, 2019Updated 7 years ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Jul 5, 2023Updated 3 years ago
- Golang Cobalt Strike Rest API Client☆18Apr 10, 2026Updated 6 months ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Changes the window titles of running processes.☆12Aug 15, 2019Updated 7 years ago
- WordPress File Upload RCE Exploit☆18Sep 1, 2025Updated last year
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆21Oct 31, 2026Updated last week
- Automation for Open Threat Exchange☆25Mar 16, 2024Updated 2 years ago
- Locate, search and download open Elasticsearch databases☆23Feb 27, 2023Updated 3 years ago
- ☆17Feb 3, 2024Updated 2 years ago
- Documentation for knoXSS tool by @brutelogic☆29Jan 24, 2017Updated 9 years ago
- Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go…☆39Oct 7, 2026Updated last month
- Virtual machines for every use case on DigitalOcean • AdGet dependable uptime with 99.99% SLA, simple security tools, and predictable monthly pricing with DigitalOcean's virtual machines, called Droplets.
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆26Mar 4, 2026Updated 8 months ago
- Bypasses App-Bound Encryption to extract cookies, passwords, browsing history, autofill data, and payment info from Chromium-based browse…☆25Feb 27, 2026Updated 8 months ago
- NCrypt portable crypter is a collection of C++ build tools, a tiny C compiler for the stub, and a useful codebase for anyone wanting to c…☆19Mar 14, 2024Updated 2 years ago
- badusb联动cobaltrstrike近源攻击☆27Aug 20, 2021Updated 5 years ago
- method 59 from UACME in a standalone .C☆21Mar 24, 2026Updated 7 months ago
- This tool is uses for SQLI+LFI+XSS+LFI+RCE Dorking and finding vulnerable sites.☆31Feb 19, 2019Updated 7 years ago
- lightweight script to show how exodus wallet-seedphrases are extracted and decrypted on windows.☆20Oct 12, 2026Updated 3 weeks ago
- Software Protector☆19Aug 16, 2020Updated 6 years ago
- Kernel Process Termination Tool ( CVE-2026-0828 exploit)☆38Apr 2, 2026Updated 7 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324☆21Aug 15, 2025Updated last year
- Comprehensive Protection Against Deepfakes, Deepnudes & Harmful Content☆26Jan 3, 2026Updated 10 months ago
- DrShell is a cutting-edge tool designed for the dynamic management of reverse shell sessions. Whether you are a seasoned security profess…☆18Aug 20, 2025Updated last year
- This is a beginner level session to train you into using SSH more effectively. While pentesters may benefit (especially if they are plan…☆15Feb 9, 2019Updated 7 years ago
- Nessus Preflight(NPF) Check for local and remote systems. Essentially sets three registry keys and restarts a service to allow nessus to …☆16Jul 31, 2026Updated 3 months ago
- A simple website to act as a store for havoc modules and extensions☆30Jan 20, 2025Updated last year
- CVE 1-day in http.sys☆42Sep 4, 2026Updated 2 months ago