Skip to content

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Notifications You must be signed in to change notification settings

dleyanlin/PayloadsAllTheThings

Repository files navigation

Payloads All The Things

A list of usefull payloads and bypasses for Web Application Security Feel free to improve with your payloads (I <3 pull requests) :)

To improve:

  • RCE
  • SQL injection
  • XXE
  • SSRF
  • Upload
  • Tar command exec
  • Traversal Directory
  • XSS
  • PHP Include
  • CSV Injection
  • PHP Serialization

About

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published

Languages

  • Python 89.1%
  • PHP 9.6%
  • Other 1.3%