A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Undetectable Windows Payload Generation

Infosec Wordlists and more.

Xss Payload Generator ~ Xss Scanner ~ Xss Dork Finder

RomBuster is a router exploitation tool that allows to disclosure network router admin password.

The purpose of this tool is to test the window10 defender protection and also other antivirus protection.

A simple framework for sending test payloads for known web CVEs.

Bad char generator to instruct encoders such as shikata-ga-nai to transform those to other chars.

Loki.Rat is a fork of the Ares RAT, it integrates new modules, like recording , lockscreen , and locate options. Loki.Rat is a Python Remote Access Tool.

A keylogger, sometimes called a keystroke logger or keyboard capture, is a type of surveillance technology used to monitor and record each keystroke on a specific computer. Keylogger software is also available for use on smartphones, such as the Apple iPhone and Android devices.

Simple MSFVenom Payload Generator

Payloads and Lists

Python - Metasploit-Framework Database Management

A simple and efficent script to obfuscate python payloads to make it completely FUD

本脚本旨在生成各类畸形URL链接，进行探测使用的payload，尝试绕过服务端ssrf限制。

Shellverse is a multi-client and multi-threaded Remote Administration Tool and post-exploitation tool

Convert binaries to shellcode (C, C#, CPP, ASM, BOF loader, PS to b64)

A simple script to obfuscate batch(bat) code easily

A framework and build automation tool to process exploits/payloads to evade antivirus and endpoint detection response products using reusable building-blocks like encryption or obfuscation. Mirrors: https://gitlab.com/0xCCF4/expkit . Create issues and merge request on gitlab.

XssPy is a tool designed to help security researchers and ethical hackers identify potential Cross-Site Scripting (XSS) vulnerabilities in web applications. It automates the process of testing for XSS vulnerabilities by analyzing web pages and submitting payloads to check for any possible security issues.