Resources
PayloadsAllTheThings
swisskyrepo/PayloadsAllTheThings
A curated collection of payloads, bypass techniques, and exploitation notes for web application security testing, used as a reference and learning resource by pentesters.
Topics
Related projects
AboutSecurity1.8kA structured penetration-testing knowledge base that packages 200+ security methodologies as SKILL.md skills for AI coding agents, alongside dictionaries, payloads and vulnerability data.
bypass-url-parser1.1kBypass URL Parser tests many URL bypass techniques to reach 4xx-protected pages, trying path, encoding, method, and header tricks. It is a curl-backed CLI and library for penetration testers.
reconftw8.4kAn automated reconnaissance tool for security researchers that chains subdomain enumeration, vulnerability scanning, OSINT, port scanning, and fuzzing into one workflow.
NetExec6kA network execution and penetration testing tool for validating credentials and running commands across SMB, WinRM, LDAP and other protocols, maintained by the community as the successor to CrackMapExec.
evil-winrm5.6kEvil-WinRM is a WinRM shell built for hacking and penetration testing. It supports pass-the-hash, Kerberos, in-memory script and assembly loading, file transfer and other post-exploitation conveniences.
blackarch3.6kBlackArch is an Arch Linux-based penetration-testing distribution bundling thousands of security tools, installable as a full OS or added to an existing Arch system.