Skip to content

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Notifications You must be signed in to change notification settings

ChrisCZ2/RepoAllTheThings

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

6 Commits
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Repo All The Things - Browser Extension

browser extension that displays all payloads and information from the PayloadsAllTheThings GitHub repository and any public github repo that you want to use and save

PSA : I tested this extension with repos that don't have a massive data size so any repo you save to the extension that has wordlists in them say like seclists it could cause ui issues. you will need to open the repo on github.

Features

  • Browse Categories: View all Directory categories from any repo
  • Search: Quickly search through categories
  • Read Content: View README files and payloads from each category
  • File Browser: Browse and view files within each category of the repo
  • Beautiful UI: Modern gradient design with smooth animations
  • Fast Loading: Efficient GitHub API integration

Installation

  1. Clone or download this repository
  2. Open your browser's extension management page:
    • Chrome/Edge: chrome://extensions/ or edge://extensions/
    • Firefox: about:addons (Note: Firefox uses Manifest V2, you may need to adapt)
  3. Enable "Developer mode"
  4. Click "Load unpacked" and select this directory
  5. The extension icon will appear in your browser toolbar

Usage

  1. Click the extension icon in your browser toolbar
  2. The popup will automatically open in a new tab load all payload categories from PayloadsAllTheThings(Default)
  3. Browse categories by clicking on any category card
  4. Use the search bar to filter categories inside the repo
  5. Click on files within a category to view their content
  6. Use the back button to return to the categories list
  7. settings menu you manual add more repos to your extension, delete wants you don't want or can set the that will be the default one on load.

Payload Categories Included

The extension displays all categories from PayloadsAllTheThings,

The extension requires:

  • storage: For storing user preferences
  • activeTab: For accessing the current tab
  • https://api.github.com/*: For fetching GitHub repository data

UI

image image

File Structure

.
├── manifest.json       # Extension manifest (Manifest V3)
├── popup.html          # Popup HTML structure
├── popup.css           # Styling for the popup
├── popup.js            # Main popup logic and API calls
├── background.js       # Service worker for background tasks
├── icons/              # Extension icons
│   ├── icon16.png
│   ├── icon48.png
│   └── icon128.png
└── README.md           # This file

Browser Compatibility

  • Chrome 88+
  • Edge 88+
  • Opera 74+
  • Firefox: need to recreate to work with firefox version

License

MIT License - Feel free to use and modify as needed.

Credits

This extension intial idea was to display content from the PayloadsAllTheThings repository by swisskyrepo. But I decided to Allow payloads and content belong to their respective authors from any public repo.

Future Plans

  • add a github api key validation field to avoid the limit on unauth api calls to github if it is needed.
  • Create a Caido plugin that is intergrated into caido proxy can do the same as the browser extension

Notes

  • The extension uses the public GitHub API (no authentication required)
  • Rate limits apply: 60 requests/hour for unauthenticated requests
  • All data is fetched in real-time from GitHub's API
  • Content is displayed as-is from the repository

About

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published