payload

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

Tools and Techniques for Red Team / Penetration Testing

Awesome XSS stuff

Python Remote Administration Tool (RAT)

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

一款支持自定义的 Java 内存马生成工具｜A customizable Java in-memory webshell generation tool.

Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。

一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率

Burp Suite Certified Practitioner Exam Study

Reflective PE packer.

Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!

Infosec Wordlists and more.

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

ALL IN ONE Hacking Tool For Hackers, Penetration Tester and Cybersecurity. New Version Beginner to Advanced Tool. This Tool is made for educational purpose only ! Author will not be responsible for any misuse of this toolkit !

TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

DJI Payload SDK Official Repository

渗透测试Payload速查平台 | Pentest Payload Quick Reference | XSS/SQLi/SSRF/RCE | React+TypeScript