payloads

There are 66 repositories under payloads topic.

PayloadsAllTheThings
swisskyrepo / PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
pentest payload bypass web-application hacking vulnerability bounty methodology privilege-escalation penetration-testing cheatsheet security enumeration bugbounty redteam payloads hacktoberfest
Language:Python 57162
payloadbox / xss-payload-list
🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List
bugbounty cross-site-scripting dom-based payload payloads reflected-xss-vulnerabilities self-xss websecurity website-vulnerability xss xss-attacks xss-detection xss-exploitation xss-injection xss-payload xss-payloads xss-poc xss-scanner xss-scanners xss-vulnerability
5688
EdOverflow / bugbounty-cheatsheet
A list of interesting payloads, tips and tricks for bug bounty hunters.
bugbounty infosec payloads security
5567
HackTools
LasCC / HackTools
The all-in-one browser extension for offensive security professionals 🛠
reverse-shell hacking hack-tools chrome-extension firefox-addon hacktools payloads xss-payloads web-pentesters hack msfvenom metasploit hackbar cheatsheet purpleteam redteam bug-bounty hackingtools
Language:TypeScript 5478
daffainfo / AllAboutBugBounty
All about bug bounty (bypasses, payloads, and etc)
bugbounty bugbountytips bypass payloads reconnaissance bug hacking security payload penetration-testing vulnerability infosec pentest
5437
payloadbox / sql-injection-payload-list
🎯 SQL Injection Payload List
sql-injection attacker sql-injection-attacks sql-injection-proof sql-injection-exploitation sql-injections sql-injection-payloads injection-payloads sql-injection-filterer sql-injection-attack owasp-top-10 payloads payload websecurity bugbounty security-research hacking sql-inject injection-attacks injection
4392
usbrubberducky-payloads
hak5 / usbrubberducky-payloads
The Official USB Rubber Ducky Payload Repository
badusb ducky-payloads duckyscript hacking-tools hak5 hak5-rubber-ducky hid hotplug keystroke-injection payloads pentesting security-tools usb-rubber-ducky usbrubberducky
Language:PowerShell 3575
1N3 / IntruderPayloads
A collection of Burpsuite Intruder payloads, BurpBounty payloads, fuzz lists, malicious file uploads and web pentesting methodologies and checklists.
attack bugbounty burpsuite burpsuite-engagement burpsuite-intruder fuzz fuzz-lists fuzzing injection intruder payloads sql-injection
Language:BlitzBasic 3553
foospidy / payloads
Git All the Payloads! A collection of web attack payloads.
payload payloads xss sqli web-attack-payloads passwords pentest hacking appsec cybersecurity
Language:Shell 3533
pwndrop
kgretzky / pwndrop
Self-deployable file hosting service for red teamers, allowing to easily upload and share payloads over HTTP and WebDAV.
file-manager self-hosted file-sharing http-server webdav-server redteam payloads
Language:JavaScript 1891
0xSobky / HackVault
A container repository for my public web hacks!
payloads web-security pentesting tracking fuzzing regex reconnaissance xss exploit
Language:JavaScript 1878
terjanq / Tiny-XSS-Payloads
A collection of tiny XSS Payloads that can be used in different contexts. https://tinyxss.terjanq.me
xss javascript html ctf bugbounty payloads
Language:JavaScript 1826
insightglacier / Dictionary-Of-Pentesting
Dictionary collection project such as Pentesing, Fuzzing, Bruteforce and BugBounty. 渗透测试、SRC漏洞挖掘、爆破、Fuzzing等字典收集项目。
pentesting fuzzing bruteforce bugbounty dictionary websecurity iot-security password pentest regex-pattern dns subdomain database wifi bugbountytips bughunting-methodology fingerprint rce spring-boot payloads
Language:Shell 1823
nettitude / PoshC2
A proxy aware C2 framework used to aid red teamers with post-exploitation and lateral movement.
poshc2 c2 redteam nettitude proxy-aware poshc2-installation python3 powershell payloads csharp
Language:PowerShell 1699
nccgroup / Winpayloads
Undetectable Windows Payload Generation
python persistence kali payloads bypass antivirus uac windows meter msfconsole metasploit powershell netsec undetectable
Language:Python 1545
whwlsfb / BurpCrypto
BurpCrypto is a collection of burpsuite encryption plug-ins, support AES/RSA/DES/ExecJs(execute JS encryption code in burpsuite). 支持多种加密算法或直接执行JS代码的用于爆破前端加密的BurpSuite插件
burp-extensions burp-plugin burpsuite-extender burpsuite payloads burpcrypto fuzz-testing execute-js-encryption ctf-tools ctf
Language:Java 1339
tokyoneon / Chimera
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
bypass-antivirus antivirus-evasion antivirus attack offensive-security kali-scripts kali-script kali-linux kali information-security reverse-shell payload payloads penetration-testing payload-generator shell shell-scripts amsi
Language:PowerShell 1321
sighook / pixload
Image Payload Creating/Injecting tools
backdoor-attacks hacking-tool image image-processing injection injector payload-generator payloads web-attack-payloads
Language:Perl 1162
payloadbox / xxe-injection-payload-list
🎯 XML External Entity (XXE) Injection Payload List
xxe xxe-injection xxe-payloads xxe-example xml websecurity websecurity-reference infosec bugbounty bug-bounty web-application-security cybersecurity cyber-security information-security xml-entity payload xxe-payload xxe-payload-list payloads hacking
1022
mvelazc0 / defcon27_csharp_workshop
Writing custom backdoor payloads with C# - Defcon 27 Workshop
csharp payloads redteam
Language:C# 975
r00t-3xp10it / FakeImageExploiter
Use a Fake image.jpg to exploit targets (hide known file extensions)
image-jpg-ps1 exploiter hide-extensions-known-file-types spoof-extensions payloads
Language:Shell 878
sh377c0d3 / Payloads
Payload Arsenal for Pentration Tester and Bug Bounty Hunters
bugbounty-tool bugbounty payload payloads payloads-database penetration-testing
Language:PHP 840
xajkep / wordlists
Infosec Wordlists and more.
infosec security fuzzing wordlists payloads discovery recon dictionary payload regex-pattern
Language:Python 702
InternalAllTheThings
swisskyrepo / InternalAllTheThings
Active Directory and Internal Pentest Cheatsheets
cheatsheet hacktoberfest payloads pentest redteam security wiki
Language:HTML 586
payloadbox / ssti-payloads
🎯 Server Side Template Injection Payloads
server-side-template-injection ssti injection payload payloads payloadbox bugbounty bounty bugbountytips websecurity web security security-audit source code source-code-analysis code-security
568
cujanovic / Open-Redirect-Payloads
Open Redirect Payloads
open-redirect payloads pentest pentest-tool pentesting
Language:Shell 550
capture0x / XSS-LOADER
Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder
xss xss-scanner xss-payloads xss-finder hacking dork-finder xss-injection payload-generator payloads xss-detection xss-attacks xss-bypass bypass-filter
Language:Python 522
sharkjack-payloads
hak5 / sharkjack-payloads
The Official Hak5 Shark Jack Payload Repository
duckyscript ethernet hacking-tools hak5 hotplug networking payloads security-tools hak5-shark-jack
Language:Shell 520
payloadbox / rfi-lfi-payload-list
🎯 RFI/LFI Payload List
application-security appsec bug-bounty bugbounty lfi lfi-exploitation lfi-vulnerability payload payload-list payloads rfi rfi-exploiton rfi-vulnerabillity security security-research security-researcher security-researchers web-application-security web-hacking websecurity
508
payloadbox / open-redirect-payload-list
🎯 Open Redirect Payload List
open-redirect openredirect payload-list payload payloads security websecurity
496
EntySec / RomBuster
RomBuster is a router exploitation tool that allows to disclosure network router admin password.
exploit credentials-gathering password-cracker information-extraction information-gathering payload payloads exploits kalilinux passwords hacking hack router-hacking router iot iot-hacking entysec
Language:Python 434
HardwareAllTheThings
swisskyrepo / HardwareAllTheThings
Hardware/IOT Pentesting Wiki
gadgets hacktoberfest hardware iot payloads pentest security wiki
Language:HTML 374
SHUR1K-N / Flipper-Zero-BadKB-Files
Looking for the BadKB files you saw in my video? Here they are. Only for educational purposes, of course.
attack badkb badusb custom firmware flipper payloads roguemaster unleashed xtreme zero
372
Phenomite / AMP-Research
Research on UDP/TCP amplification vectors, payloads and mitigations against their use in DDoS Attacks
udp ddos ddos-attacks amplification mitigations payloads dns-amplification-attack cldap dvr tcp
Language:C 317
cytopia / badchars
Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.
badchars encoder encoder-decoder reverse-engineering payload payloads security-tools cytopia-sec
Language:Python 261
Mehdi0x90 / Web_Hacking
Bug Bounty Tricks and useful payloads and bypasses for Web Application Security.
api-pentest bugbounty hacking payloads penetration-testing recon web-application-security webhacking websecurity bypass cheatsheet pentest security vulnerability exploit api-security bug-bounty-hunters owasp enumeration redteam
190

payloads

swisskyrepo / PayloadsAllTheThings

payloadbox / xss-payload-list

EdOverflow / bugbounty-cheatsheet

LasCC / HackTools

daffainfo / AllAboutBugBounty

payloadbox / sql-injection-payload-list

hak5 / usbrubberducky-payloads

1N3 / IntruderPayloads

foospidy / payloads

kgretzky / pwndrop

0xSobky / HackVault

terjanq / Tiny-XSS-Payloads

insightglacier / Dictionary-Of-Pentesting

nettitude / PoshC2

nccgroup / Winpayloads

whwlsfb / BurpCrypto

tokyoneon / Chimera

sighook / pixload

payloadbox / xxe-injection-payload-list

mvelazc0 / defcon27_csharp_workshop

r00t-3xp10it / FakeImageExploiter

sh377c0d3 / Payloads

xajkep / wordlists

swisskyrepo / InternalAllTheThings

payloadbox / ssti-payloads

cujanovic / Open-Redirect-Payloads

capture0x / XSS-LOADER

hak5 / sharkjack-payloads

payloadbox / rfi-lfi-payload-list

payloadbox / open-redirect-payload-list

EntySec / RomBuster

swisskyrepo / HardwareAllTheThings

SHUR1K-N / Flipper-Zero-BadKB-Files

Phenomite / AMP-Research

cytopia / badchars

Mehdi0x90 / Web_Hacking