payloads

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

A list of interesting payloads, tips and tricks for bug bounty hunters.

The all-in-one Red Team extension for Web Pentester 🛠

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

Git All the Payloads! A collection of web attack payloads.

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

All about bug bounty (bypasses, payloads, and etc)

🎯 SQL Injection Payload List

A container repository for my public web hacks!

Undetectable Windows Payload Generation

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Image Payload Creating/Injecting tools

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Use a Fake image.jpg to exploit targets (hide known file extensions)

Writing custom backdoor payloads with C# - Defcon 27 Workshop

🎯 XML External Entity (XXE) Injection Payload List

Open Redirect Payloads

Infosec Wordlists

Payload Arsenal for Pentration Tester and Bug Bounty Hunters

🎯 Open Redirect Payload List

🎯 RFI/LFI Payload List

🎯 Server Side Template Injection Payloads

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

Research on UDP/TCP amplification vectors, payloads and mitigations against their use in DDoS Attacks

Common Web Managers Fuzz Wordlists