A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Quick read
Latest capture 2026-08-30 03:03
0 paths
Agent instructions and tool configuration found in this repository.
No config files detected.
5 observed captures since 2026-06-22. Observed captures are shown by default.
Stars from first capture +1906
Observed captures only
All tracked data
Observed snapshots
Observed snapshots
Nearest indexed repositories by embedding similarity.
A list of interesting payloads, tips and tricks for bug bounty hunters.
Full-featured C2 framework which silently persists on webserver with a single-line PHP backdoor
Git All the Payloads! A collection of web attack payloads.
A tool designed to exploit a privilege escalation vulnerability in the sudo program on Unix-like systems. It takes advantage of a specific misconfiguration or flaw in sudo to gain elevated privileges on the system, essentially allowing a regular user to execute commands as the root user.
An Active Defense and EDR software to empower Blue Teams
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
