A list of useful payloads and bypass for Web Application Security and Pentest/CTF
- pentest
- payload
- bypass
- web-application
Repository Index
47,133 repositories indexed
1–24 of 74 · Most stars
ALL IN ONE Hacking Tool For Hackers
- allinonehackingtool
- web-attack
- password-attack
- hacking
Open-source AI penetration testing tool to find and fix your app’s vulnerabilities.
An open-source user mode debugger for Windows. Optimized for reverse engineering and malware analysis.
React Flow | Svelte Flow - Powerful open source libraries for building node-based UIs with React (https://reactflow.dev) or Svelte (https://svelteflow.dev). Ready out-of-the-box and infinitely customizable.
- flowchart
- graph
- typescript-library
- react
⚡ Automatically decrypt encryptions without knowing the key or cipher, decode encodings, and crack hashes ⚡
- decryption
- natural-language-processing
- cryptography
- cipher
A collection of hacking / penetration testing resources to make you better!
- ctf
- hacking
- privilege-escalation
- reverse-engineering
OWASP Juice Shop: Probably the most modern and sophisticated insecure web application
- owasp
- javascript
- vulnerable
- hacking
CTF framework and exploit development library
HexStrike AI MCP Agents is an advanced MCP server that lets AI agents (Claude, GPT, Copilot, etc.) autonomously run 150+ cybersecurity tools for automated pentesting, vulnerability discovery, bug bounty automation, and security research. Seamlessly bridge LLMs with real-world offensive security capabilities.
Welcome to the page where you will find each trick/technique/whatever I have learnt in CTFs, real life apps, and reading researches and news.
- hacktricks
- pentesting
- hacking
- peass
A curated list of CTF frameworks, libraries, resources and softwares
Bartosz Milewski's 'Category Theory for Programmers' unofficial PDF and LaTeX source
- haskell
- category-theory
- functional-programming
Exploit Development and Reverse Engineering with GDB & LLDB Made Easy
- python
- gdb
- pwndbg
- reverse-engineering
Some setup scripts for security research tools.
GEF (GDB Enhanced Features) - a modern experience for GDB with advanced debugging capabilities for exploit devs & reverse engineers on Linux
RSA attack tool (mainly for ctf) - retrieve private key from weak public key and/or uncipher data
- rsa-attack
- rsa
- cryptography
CTFs as you need them
Course materials for Modern Binary Exploitation by RPISEC
- exploitation
- wargame
- ctf
Create randomly insecure VMs
- security
- security-vulnerability
- virtualization
- randomization
The best tool for finding one gadget RCE in libc.so.6
- ctf
- pwnable
- pwn
- glibc
A deliberately vulnerable CI/CD environment. Learn CI/CD security through multiple challenges.
Fluent — planning, spec and documentation
🔗 Don't know what type of hash it is? Name That Hash will name that hash type! 🤖 Identify MD5, SHA256 and 300+ other hashes ☄ Comes with a neat web app 🔥