A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

GTFOBins is a curated list of Unix binaries that can be used to bypass local security restrictions in misconfigured systems

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV softw…

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

All about bug bounty (bypasses, payloads, and etc)

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

Detect and bypass web application firewalls and protection systems

Penetration tests guide based on OWASP including test cases, resources and examples.

This map lists the essential techniques to bypass anti-virus and EDR

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!

[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools

The goal of this repository is to document the most common techniques to bypass AppLocker.

从零学习Webshell免杀手册

Undetectable Windows Payload Generation

Miscellaneous exploit code

A big list of Android Hackerone disclosed reports and other resources.