bypass

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Your Essential Exam Companion for the Iamneo Portal & NPTEL Exams Disguised as NeoExamShield bypass

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

Selfhosted alternative to 12ft.io. and 1ft.io. Proxy to remove CORS headers and modify HTML

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

This map lists the essential techniques to bypass anti-virus and EDR

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

Detect and bypass web application firewalls and protection systems

A cloudflare verification bypass script for webscraping

A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!

Bypass MDM Setup for MacOS, up to MacOS Tahoe 26.3

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Solve Google reCAPTCHA in less than 5 seconds! 🚀

Cloudflare超级代理，无服务器代理，Duckduckgo代理（可用AI聊天，包含GPT4o/Claude3），Github加速，支持解锁Libgen，在线代理。现已支持多平台部署。Cloudflare super proxy, setting up a free serverless proxy by using Cloudflare worker, support Duckduckgo / Libgen. Now you can deploy this project on different platforms.

从零学习Webshell免杀手册

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

A big list of Android Hackerone disclosed reports and other resources.

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Check your WAF before an attacker does

InvisiProxy LTS is a web proxy service that helps you access websites that may be blocked by your network, government or policy all within your browser with no download or setup. It does this securely and with additional privacy features. Browse Tor/Onion sites in any browser, hide browsing activity and bypass filters. (Star if you fork it!)

Spoof TLS/JA3 fingerprints in GO and Javascript

XUI-PRO nginx reverse proxy with ws/grpc/httpupgrade/splithttp,xray protocol support: vless,vmess,trojan,shadowsocks panel cloudflare ssl,xtls,ssr,v2fly,v2ray installer bypass restrictions sing-box,shadowtls,reality,tunnel,gfw tor warp wireguard geoip tuic clash vpn mihomo psiphon hy2 oneclick argo bbr wstunnel anticensorship⚡🛡️

bypass-url-parser

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

BlazeHTTP 是一款简单易用的 WAF 防护效果测试工具。BlazeHTTP stands as a user-friendly WAF protection efficacy evaluation tool.

shellcode免杀加载器，使用go实现，免杀bypass火绒、360、核晶、def等主流杀软