This repository contains payloads which are listed by swisskyrepo/PayloadAllTheThings and many of my own crafted payloads for each of the web attacking domain
☆38Jun 26, 2024Updated 2 years ago
Alternatives and similar repositories for web-payloads
Users that are interested in web-payloads are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- Modular post-exploitation framework for authorised red-team work. Interactive reverse/bind shells over TCP/TLS/mTLS, plus a pull-based Go…☆37Oct 7, 2026Updated last week
- ShellcodeCrypterVSExtension is a Visual Studio extension that provides a simple XORand AES-based encryption and decryption tool. It allow…☆10Mar 18, 2025Updated last year
- Work in Progress. RAT written in C++ using wxWidgets☆11Sep 13, 2019Updated 7 years ago
- Tools for generating and validating IBANs (International Bank Account Numbers)☆10Aug 11, 2020Updated 6 years ago
- Bruteratel☆14Oct 26, 2022Updated 3 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Anti-forensics tool Inspired by NSA's Marble framework.☆10Apr 17, 2025Updated last year
- PE Sections Packer + Loader for Windows - Packs a DLL/EXE file and maps it into the loader (C/C++)☆16Oct 19, 2025Updated 11 months ago
- **CVE-2026-2636** is a vulnerability in the Windows Common Log File System (CLFS) driver (`CLFS.sys`). An unprivileged user can trigger a…☆15Feb 26, 2026Updated 7 months ago
- Spoof parent process ID☆14Jan 23, 2019Updated 7 years ago
- With this RunPE you can easily inject your payload in any x86 or x64 program.☆16Jun 3, 2019Updated 7 years ago
- Chameleon Wordlists☆15Sep 13, 2022Updated 4 years ago
- BOF and C++ implementation of the Windows Defender sandboxing technique described by Elastic Security Labs/Gabriel Landau.☆24Jul 5, 2023Updated 3 years ago
- Changes the window titles of running processes.☆12Aug 15, 2019Updated 7 years ago
- Golang Cobalt Strike Rest API Client☆18Apr 10, 2026Updated 6 months ago
- 1-Click AI Models by DigitalOcean Gradient • AdDeploy popular AI models on DigitalOcean Gradient GPU virtual machines with just a single click. Zero configuration with optimized deployments.
- Rust crate to obfuscate strings and byte arrays so they are not in memory when not in use.☆21Apr 30, 2026Updated 5 months ago
- Extract metadata with SSRF (Server-Side Request Forgery)☆16Jul 23, 2022Updated 4 years ago
- Reconness Agents Script☆32Jul 25, 2022Updated 4 years ago
- ☆17Feb 3, 2024Updated 2 years ago
- WordPress File Upload RCE Exploit☆18Sep 1, 2025Updated last year
- Around the finger, tenderness, wrapped around the world, 24 days ago, ⋅ 3 reading Collect and organize various webshells to do webshell d…☆24Sep 16, 2018Updated 8 years ago
- USB Modem/IAX2 War Dialer☆21Feb 2, 2026Updated 8 months ago
- Automation: Bash script wrapper to find and verify time base sql injection☆10May 23, 2026Updated 4 months ago
- This small script helps to avoid using MetaSploit (msfconsole) during the Enterprise pentests and OSCP-like exams. Grep included function…☆14Mar 9, 2023Updated 3 years ago
- Deploy on Railway without the complexity - Free Credits Offer • AdConnect your repo and Railway handles the rest with instant previews. Quickly provision container image services, databases, and storage volumes.
- Windows Access token manipulation tool made in C#☆25Aug 24, 2025Updated last year
- PPLReaper is a Windows UNSIGNED kernel driver + userland companion tool designed to inspect and manipulate Protected Process Light (PPL) …☆25Mar 4, 2026Updated 7 months ago
- Fresh malware samples caught in the wild daily from random places. 🎣☆22Jun 27, 2019Updated 7 years ago
- badusb联动cobaltrstrike近源攻击☆27Aug 20, 2021Updated 5 years ago
- Monokai Hacker VSCode Theme (High Contrast Matrix Terminal)☆13Nov 10, 2023Updated 2 years ago
- Bypasses App-Bound Encryption to extract cookies, passwords, browsing history, autofill data, and payment info from Chromium-based browse…☆24Feb 27, 2026Updated 7 months ago
- method 59 from UACME in a standalone .C☆21Mar 24, 2026Updated 6 months ago
- Locate, search and download open Elasticsearch databases☆23Feb 27, 2023Updated 3 years ago
- NCrypt portable crypter is a collection of C++ build tools, a tiny C compiler for the stub, and a useful codebase for anyone wanting to c…☆19Mar 14, 2024Updated 2 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- DrShell is a cutting-edge tool designed for the dynamic management of reverse shell sessions. Whether you are a seasoned security profess…☆18Aug 20, 2025Updated last year
- sap netweaver 0day poc by shinyhunters (scattered lapsus$ hunters) affecting all 7.x CVE-2025-31324☆22Aug 15, 2025Updated last year
- Comprehensive Protection Against Deepfakes, Deepnudes & Harmful Content☆24Jan 3, 2026Updated 9 months ago
- spring-cloud-gateway-rce CVE-2022-22947☆12Jul 13, 2022Updated 4 years ago
- ☆23Nov 23, 2019Updated 6 years ago
- lightweight script to show how exodus wallet-seedphrases are extracted and decrypted on windows.☆19Updated this week
- A simple website to act as a store for havoc modules and extensions☆30Jan 20, 2025Updated last year