A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Repository Index
47,133 repositories indexed
1–24 of 42 · Most stars
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .
A push notification server written in Go (Golang).
A list of interesting payloads, tips and tricks for bug bounty hunters.
Awesome XSS stuff
PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.
Malware Configuration And Payload Extraction
Reflective PE packer.
UEFI pre-driver NVIDIA GPU unlocker for Windows Linux Hackintosh and all EFI-bootable system (Rust): SEC2 scrubber -> FWSEC/WPR2 -> signed Booter -> V67 four-write payload, read-back verified. Verified on most RTX 20 30 40 Series.
An automated payload loader for exploited PS5 consoles
A modern PS5 download manager with a native TV app, phone controls and Orbit Zero for Mac, Windows and Linux.
ngrep is like GNU grep applied to the network layer. It's a PCAP-based tool that allows you to specify an extended regular or hexadecimal expression to match against data payloads of packets. It understands many kinds of protocols, including IPv4/6, TCP, UDP, ICMPv4/6, IGMP and Raw, across a wide variety of interface types, and understands BPF filter logic in the same fashion as more common packet sniffing tools, such as tcpdump and snoop.
Ronin is a Free and Open Source Ruby Toolkit for Security Research and Development. Ronin also allows for the rapid development and distribution of code, exploits, payloads, etc, via 3rd-party git repositories.
Framework for Making Environmental Keyed Payloads (NO LONGER SUPPORTED)
List DTDs and generate XXE payloads using those local DTDs.
The official Next.js website for payloadcms.com
AI Plugin is a powerful extension for the Payload CMS, integrating advanced AI capabilities to enhance content creation and management.
Sandbox for semi-automatic Javascript malware analysis, deobfuscation and payload extraction. Written for Node.js
Robust Payload CMS plugin to integrate Better-Auth into your projects
ARMv7 payload that provides arbitrary code execution on MediaTek bootloaders
Payload 3.0 enchantment packages
Authentication plugin for Payload CMS