weyne/PayloadsAllTheThings
1
0
Fork 0
mirror of https://github.com/weyne85/PayloadsAllTheThings.git synced 2025-10-29 16:57:02 +00:00
Code Issues Packages Projects Releases Wiki Activity
54 Commits 4 Branches 4 Tags
Go to file
Clone
Open with VS Code Open with VSCodium Open with Intellij IDEA
Download ZIP Download TAR.GZ Download BUNDLE
Swissky b0769b19b0 Update Git-rip
2017-03-14 23:39:02 +01:00
AWS Amazon Bucket S3
AWS added, XSS and methodology update
2016-11-11 16:03:35 +07:00
CRLF injection
Enumeration added and improvement for CRLF/XSS/SQL
2016-11-02 20:26:00 +07:00
CSV injection
Fix in juggling type + CSV injection
2016-10-20 10:50:12 +07:00
CVE Shellshock Heartbleed
CVE Heartbleed and Shellshcok added
2016-10-20 09:54:29 +07:00
Git Svn insecure files
Update Git-rip
2017-03-14 23:39:02 +01:00
NoSQL injection
NOSQL injection added + updates XSS/XXE
2016-10-30 18:53:32 +07:00
OAuth
XSS,SQL OAuth Updated
2016-12-04 01:03:59 +07:00
Open redirect
Clean project - Renamed and added PHP juggling type
2016-10-20 10:22:24 +07:00
PHP include
Methodology added, XSS payloads updated,little fix
2016-11-06 12:42:50 +07:00
PHP juggling type
Fix in juggling type + CSV injection
2016-10-20 10:50:12 +07:00
PHP serialization
PHP object injection
2016-10-20 11:02:19 +07:00
Remote commands execution
RCE Time based : Data extraction
2017-03-03 21:41:00 +01:00
SQL injection
SQLite injection update-Extract table/column name
2017-02-21 09:16:51 +01:00
SSRF injection
Minor Updates in SQL-SSRF-XSS
2017-01-07 20:51:47 +01:00
Tar commands execution
Clean project - Renamed and added PHP juggling type
2016-10-20 10:22:24 +07:00
Traversal directory
Traversal Dir files + Updates XSS
2016-10-21 06:12:00 +07:00
Upload insecure files
Methodo, SQL,RCE,XSS,XXE updated
2016-12-20 19:46:06 +01:00
Web cache deception
Typo fix in Web cache
2017-02-27 20:06:40 +01:00
XSS injection
XSS Payload - bypass document blacklisted keyword
2017-03-02 17:39:15 +01:00
XXE injections
Methodo, SQL,RCE,XSS,XXE updated
2016-12-20 19:46:06 +01:00
.gitignore
Methodology added, XSS payloads updated,little fix
2016-11-06 12:42:50 +07:00
Methodology_and_enumeration.md
add git clone for subbrute
2017-02-21 22:00:35 +08:00
README.md
Web cache deception
2017-02-27 20:03:11 +01:00

README.md

Payloads All The Things

A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques ! I <3 pull requests :)

Tools

More resources

Book's list:

Blogs/Websites

Practice

Description
No description provided
Readme MIT 17 MiB
Languages
Python 86.2%
Ruby 6.4%
ASP.NET 3.8%
Classic ASP 1.4%
PHP 1.3%
Other 0.8%