Payloads GitHub Repositories

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

The all-in-one browser extension for offensive security professionals 🛠

All about bug bounty (bypasses, payloads, and etc)

A list of interesting payloads, tips and tricks for bug bounty hunters.

The Official USB Rubber Ducky Payload Repository

Git All the Payloads! A collection of web attack payloads.

A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.

A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me

Active Directory and Internal Pentest Cheatsheets

Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.

A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.

Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。

A container repository for my public web hacks!

BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件

Undetectable Windows Payload Generation

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Image Payload Creating/Injecting tools

Writing custom backdoor payloads with C# - Defcon 27 Workshop

Infosec Wordlists and more.

Use a Fake image.jpg to exploit targets (hide known file extensions)

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

Hardware/IOT Pentesting Wiki

Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.

The Official Hak5 Shark Jack Payload Repository

Open Redirect Payloads

Looking for the BadKB files you saw in my video? Here they are. Only for educational purposes, of course.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

List of payloads and wordlists that are specifically crafted to identify and exploit vulnerabilities in target web applications.

Research on UDP/TCP amplification vectors, payloads and mitigations against their use in DDoS Attacks