xsuperbug/payloads external links

---

GitHub - View repository

GitHub.dev - Open in online code editor

Star history - Growth chart over time

deps.dev - Dependencies and security vulnerabilities

Gitingest - Export source code for LLM usage

Repomix - Export source code for LLM usage

uithub - Export source code for LLM usage

Close

xsuperbug/payloads

Readme badge preview -

If you own this repo, copy the snippet below and add it to your README.md

---

Copy

[![RelatedRepos](https://img.shields.io/badge/related-repos-yellow)](https://relatedrepos.com/gh/xsuperbug/payloads)

Close

xsuperbug / payloadsView on GitHubMore

• External links
• Readme badge

☆141Oct 4, 2018Updated 7 years ago

Alternatives and similar repositories for payloads

Users that are interested in payloads are comparing it to the libraries listed below

• xsuperbug / g0yg0y

  View on GitHub
  ☆27Feb 26, 2016Updated 10 years ago
• shadsidd / Automated-XSS-Finder

  View on GitHub
  Automated XSS Finder
  ☆63Aug 7, 2013Updated 12 years ago
• HernanRodriguez1 / ScanReflectedSSTI

  View on GitHub
  Template Nuclei SSTI
  ☆34Nov 18, 2025Updated 3 months ago
• Asbawy / Automation-for-Juniper-cve-2023-36845

  View on GitHub
  Simple Automation script for juniper cve-2023-36845
  ☆19Jan 30, 2024Updated 2 years ago
• xsscx / fuzz

  View on GitHub
  Commodity Injection Signatures, Malicious Inputs, XSS, HTTP Header Injection, XXE, RCE, Javascript, XSLT
  ☆404Updated this week
• netsparker / Titanium-Web-Proxy

  View on GitHub
  A light weight http(s) proxy server in C#.NET
  ☆15Apr 6, 2017Updated 8 years ago
• pwnwiki / webappurls

  View on GitHub
  A public list of URLs generally useful to webapp testers and pentesters
  ☆112Jun 5, 2017Updated 8 years ago
• HernanRodriguez1 / EnumParameter

  View on GitHub
  ☆19Dec 1, 2025Updated 3 months ago
• Ravaan21 / Chandrahasa

  View on GitHub
  A solid recon tool I use personally.
  ☆30May 12, 2023Updated 2 years ago
• dogancanbakir / pirebok

  View on GitHub
  Moved to HappyHackingSpace/pirebok
  ☆14Feb 11, 2026Updated 2 weeks ago
• orwagodfather / ShoLister

  View on GitHub
  ShoLister is a tool that collects all available subdomains for specific hostname or organization from Shodan. The tool is designed to be …
  ☆13May 10, 2022Updated 3 years ago
• tamimhasan404 / Open-Source-Nuclei-Templates-Downloader

  View on GitHub
  Script that download 37+ open source nuclei templates
  ☆45Sep 2, 2022Updated 3 years ago
• nirsarkar / vscan

  View on GitHub
  ☆36Jun 23, 2022Updated 3 years ago
• PaulSec / CSRFT

  View on GitHub
  A lightweight CSRF Toolkit for easy Proof of concept
  ☆172Jun 11, 2014Updated 11 years ago
• hisxo / Wordlist

  View on GitHub
  Wordlists for Bug Bounty
  ☆23Aug 18, 2019Updated 6 years ago
• onvio / wordlists

  View on GitHub
  Shared wordlists used for common subdomains , directory bruteforcing etc.
  ☆10May 26, 2025Updated 9 months ago
• ethicalhackingplayground / Gxss

  View on GitHub
  Tool for checking reflecting Parameters in a URL.
  ☆10Aug 31, 2020Updated 5 years ago
• virusvfv / BurpBounty-Profiles

  View on GitHub
  ☆16Oct 24, 2018Updated 7 years ago
• doosec101 / swagger_scanner

  View on GitHub
  This tool checks if the given Url/File has Swagger Ui, That can be tested later..
  ☆37May 1, 2023Updated 2 years ago
• wish-i-was / femida

  View on GitHub
  Automated blind-xss search for Burp Suite
  ☆285Oct 10, 2019Updated 6 years ago
• 7ioSecurity / XSS-Payloads

  View on GitHub
  XSS Payloads
  ☆49Feb 2, 2016Updated 10 years ago
• bugbountyforum / XSS-Radar

  View on GitHub
  ☆332Jan 8, 2018Updated 8 years ago
• phefley / burp-javascript-security-extension

  View on GitHub
  A Burp Suite extension which performs checks for cross-domain scripting against the DOM, subresource integrity checks, and evaluates Java…
  ☆26Mar 23, 2022Updated 3 years ago
• dienuet / crossdomain

  View on GitHub
  CORS checking
  ☆34Jul 16, 2018Updated 7 years ago
• rahulkadavil / Buggyapp

  View on GitHub
  Buggyapp is an vulnerable android application. This app can be used by pentesters, security researchers to practice Android application p…
  ☆13Jun 4, 2022Updated 3 years ago
• emadshanab / Blind-xss-via-ffuf

  View on GitHub
  ☆12Jan 4, 2022Updated 4 years ago
• foospidy / payloads

  View on GitHub
  Git All the Payloads! A collection of web attack payloads.
  ☆3,903May 15, 2023Updated 2 years ago
• 0xElkot / My-Nuclei-Templates

  View on GitHub
  ☆35Aug 2, 2022Updated 3 years ago
• U53RW4R3 / nuclei-fuzzer-templates

  View on GitHub
  My personal collection of nuclei templates made for fuzzing.
  ☆29Sep 6, 2024Updated last year
• ajinabraham / WebAppSec

  View on GitHub
  Web Application Security
  ☆130Jan 6, 2026Updated last month
• rudSarkar / T1tl3

  View on GitHub
  A simple python script which can check HTTP status of branch of URLs/Subdomains and grab URLs/Subdomain title
  ☆12Oct 16, 2019Updated 6 years ago
• yavolo / nuclei-templates

  View on GitHub
  ☆14Feb 7, 2024Updated 2 years ago
• Virdoexhunter / Subenum_deep_subdomain_enumeration

  View on GitHub
  In this repo, I have created a subdomain enumeration function that grab subdomains in deep.
  ☆23Mar 19, 2023Updated 2 years ago
• R0X4R / Parshu

  View on GitHub
  Filter URLs to save your time.
  ☆60Jul 29, 2022Updated 3 years ago
• luke-goddard / LFI-Fuzzer-Burp-Suite

  View on GitHub
  Local File Inclusion Burp-Suite Intruder Payload Generator Plugin
  ☆40Oct 13, 2020Updated 5 years ago
• moloch-- / CSP-Bypass

  View on GitHub
  A Burp Plugin for Detecting Weaknesses in Content Security Policies
  ☆166May 19, 2023Updated 2 years ago
• helpsystems / pycodin

  View on GitHub
  A QEMU based framework for instrumenting x86 programs from Python
  ☆17Oct 5, 2020Updated 5 years ago
• glyptho / templatesallnuclei

  View on GitHub
  This includes all the templates of nuclei collected from different sources
  ☆18Dec 30, 2022Updated 3 years ago
• TheCyberpunker / payloads

  View on GitHub
  List of XSS Payloads
  ☆15Jul 5, 2022Updated 3 years ago