mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2026-01-01 21:31:40 +01:00
Commit Graph
Select branches
Hide Pull Requests
gh-pages
master
#10
#100
#101
#102
#103
#105
#106
#107
#108
#109
#110
#111
#112
#113
#114
#115
#116
#117
#118
#119
#120
#121
#122
#123
#124
#125
#127
#128
#129
#13
#130
#131
#132
#134
#135
#136
#137
#138
#139
#142
#143
#145
#146
#148
#149
#15
#150
#151
#152
#154
#155
#156
#157
#158
#159
#162
#163
#164
#165
#166
#167
#169
#17
#171
#172
#173
#174
#175
#176
#178
#179
#18
#180
#181
#182
#183
#186
#187
#188
#19
#190
#191
#192
#193
#196
#197
#198
#2
#20
#200
#201
#202
#204
#206
#207
#208
#209
#21
#210
#213
#214
#215
#216
#217
#218
#219
#22
#220
#221
#223
#224
#225
#226
#227
#229
#23
#230
#231
#233
#234
#235
#236
#237
#238
#239
#24
#240
#241
#242
#243
#244
#246
#247
#248
#249
#25
#250
#251
#253
#254
#255
#257
#258
#259
#26
#260
#261
#262
#263
#264
#265
#266
#267
#268
#269
#27
#270
#271
#272
#273
#274
#275
#276
#277
#278
#279
#28
#280
#281
#282
#283
#284
#285
#287
#288
#289
#29
#290
#291
#292
#293
#294
#296
#297
#3
#30
#302
#304
#305
#306
#307
#308
#309
#310
#311
#312
#313
#314
#315
#316
#319
#32
#320
#322
#323
#324
#325
#326
#327
#328
#329
#330
#331
#332
#333
#334
#335
#336
#338
#339
#34
#341
#343
#345
#346
#348
#349
#35
#350
#351
#352
#353
#354
#355
#356
#358
#36
#360
#361
#362
#365
#366
#367
#37
#370
#371
#374
#375
#376
#377
#378
#379
#38
#381
#383
#384
#386
#387
#388
#389
#39
#395
#396
#397
#398
#399
#40
#400
#401
#402
#403
#404
#405
#406
#407
#408
#409
#41
#410
#411
#412
#413
#414
#415
#416
#417
#418
#419
#42
#420
#421
#422
#423
#424
#425
#426
#427
#428
#429
#43
#430
#431
#432
#433
#434
#435
#436
#437
#438
#439
#44
#440
#441
#442
#443
#444
#445
#446
#447
#448
#449
#45
#450
#451
#452
#453
#454
#455
#456
#457
#458
#46
#460
#461
#462
#463
#464
#465
#466
#467
#468
#469
#47
#470
#471
#472
#473
#474
#475
#476
#477
#478
#479
#48
#480
#481
#482
#483
#484
#485
#486
#487
#488
#489
#49
#490
#491
#492
#493
#494
#495
#496
#497
#498
#499
#50
#500
#501
#502
#503
#504
#505
#506
#507
#508
#509
#510
#511
#512
#513
#514
#515
#516
#517
#518
#519
#52
#520
#521
#522
#523
#524
#525
#526
#527
#528
#529
#53
#530
#531
#532
#533
#534
#535
#536
#537
#538
#539
#54
#540
#541
#541
#542
#543
#544
#545
#546
#547
#548
#549
#55
#550
#551
#552
#553
#554
#555
#556
#557
#558
#559
#56
#560
#561
#562
#563
#564
#565
#566
#567
#568
#569
#57
#570
#571
#572
#573
#574
#575
#576
#577
#578
#579
#58
#580
#580
#581
#582
#583
#584
#585
#586
#587
#588
#589
#590
#591
#592
#593
#594
#595
#596
#597
#598
#599
#6
#60
#600
#601
#602
#603
#604
#604
#605
#606
#607
#608
#609
#61
#610
#611
#612
#613
#614
#615
#616
#617
#618
#619
#62
#620
#621
#622
#623
#624
#625
#626
#627
#628
#629
#63
#630
#631
#631
#632
#633
#634
#635
#636
#637
#638
#639
#64
#640
#641
#642
#643
#644
#645
#646
#647
#648
#649
#65
#650
#651
#652
#653
#654
#655
#655
#656
#657
#658
#659
#66
#660
#661
#662
#663
#664
#665
#666
#667
#668
#669
#67
#670
#671
#672
#673
#674
#675
#676
#677
#677
#678
#679
#680
#681
#682
#683
#684
#685
#686
#687
#688
#689
#690
#691
#692
#693
#694
#695
#696
#697
#698
#699
#7
#70
#700
#701
#702
#703
#704
#705
#706
#706
#707
#708
#709
#71
#710
#711
#712
#713
#714
#715
#716
#717
#718
#719
#719
#72
#720
#720
#721
#722
#723
#724
#725
#726
#727
#728
#729
#73
#730
#731
#732
#733
#734
#735
#736
#737
#738
#739
#740
#740
#741
#741
#742
#743
#744
#745
#746
#747
#748
#749
#75
#750
#751
#752
#753
#754
#755
#756
#757
#758
#759
#76
#760
#761
#762
#763
#764
#765
#766
#767
#768
#769
#770
#771
#772
#773
#774
#775
#775
#776
#777
#778
#779
#780
#781
#782
#783
#784
#785
#786
#787
#788
#789
#79
#790
#791
#792
#793
#794
#795
#796
#797
#798
#799
#799
#8
#8
#800
#801
#802
#803
#804
#805
#806
#807
#807
#808
#808
#809
#809
#810
#810
#811
#811
#82
#83
#85
#86
#87
#88
#92
#93
#94
#96
#97
#98
#99
1.0
2.0
2.1
3.0
4.0
4.1
4.2
Select branches
Hide Pull Requests
gh-pages
master
#10
#100
#101
#102
#103
#105
#106
#107
#108
#109
#110
#111
#112
#113
#114
#115
#116
#117
#118
#119
#120
#121
#122
#123
#124
#125
#127
#128
#129
#13
#130
#131
#132
#134
#135
#136
#137
#138
#139
#142
#143
#145
#146
#148
#149
#15
#150
#151
#152
#154
#155
#156
#157
#158
#159
#162
#163
#164
#165
#166
#167
#169
#17
#171
#172
#173
#174
#175
#176
#178
#179
#18
#180
#181
#182
#183
#186
#187
#188
#19
#190
#191
#192
#193
#196
#197
#198
#2
#20
#200
#201
#202
#204
#206
#207
#208
#209
#21
#210
#213
#214
#215
#216
#217
#218
#219
#22
#220
#221
#223
#224
#225
#226
#227
#229
#23
#230
#231
#233
#234
#235
#236
#237
#238
#239
#24
#240
#241
#242
#243
#244
#246
#247
#248
#249
#25
#250
#251
#253
#254
#255
#257
#258
#259
#26
#260
#261
#262
#263
#264
#265
#266
#267
#268
#269
#27
#270
#271
#272
#273
#274
#275
#276
#277
#278
#279
#28
#280
#281
#282
#283
#284
#285
#287
#288
#289
#29
#290
#291
#292
#293
#294
#296
#297
#3
#30
#302
#304
#305
#306
#307
#308
#309
#310
#311
#312
#313
#314
#315
#316
#319
#32
#320
#322
#323
#324
#325
#326
#327
#328
#329
#330
#331
#332
#333
#334
#335
#336
#338
#339
#34
#341
#343
#345
#346
#348
#349
#35
#350
#351
#352
#353
#354
#355
#356
#358
#36
#360
#361
#362
#365
#366
#367
#37
#370
#371
#374
#375
#376
#377
#378
#379
#38
#381
#383
#384
#386
#387
#388
#389
#39
#395
#396
#397
#398
#399
#40
#400
#401
#402
#403
#404
#405
#406
#407
#408
#409
#41
#410
#411
#412
#413
#414
#415
#416
#417
#418
#419
#42
#420
#421
#422
#423
#424
#425
#426
#427
#428
#429
#43
#430
#431
#432
#433
#434
#435
#436
#437
#438
#439
#44
#440
#441
#442
#443
#444
#445
#446
#447
#448
#449
#45
#450
#451
#452
#453
#454
#455
#456
#457
#458
#46
#460
#461
#462
#463
#464
#465
#466
#467
#468
#469
#47
#470
#471
#472
#473
#474
#475
#476
#477
#478
#479
#48
#480
#481
#482
#483
#484
#485
#486
#487
#488
#489
#49
#490
#491
#492
#493
#494
#495
#496
#497
#498
#499
#50
#500
#501
#502
#503
#504
#505
#506
#507
#508
#509
#510
#511
#512
#513
#514
#515
#516
#517
#518
#519
#52
#520
#521
#522
#523
#524
#525
#526
#527
#528
#529
#53
#530
#531
#532
#533
#534
#535
#536
#537
#538
#539
#54
#540
#541
#541
#542
#543
#544
#545
#546
#547
#548
#549
#55
#550
#551
#552
#553
#554
#555
#556
#557
#558
#559
#56
#560
#561
#562
#563
#564
#565
#566
#567
#568
#569
#57
#570
#571
#572
#573
#574
#575
#576
#577
#578
#579
#58
#580
#580
#581
#582
#583
#584
#585
#586
#587
#588
#589
#590
#591
#592
#593
#594
#595
#596
#597
#598
#599
#6
#60
#600
#601
#602
#603
#604
#604
#605
#606
#607
#608
#609
#61
#610
#611
#612
#613
#614
#615
#616
#617
#618
#619
#62
#620
#621
#622
#623
#624
#625
#626
#627
#628
#629
#63
#630
#631
#631
#632
#633
#634
#635
#636
#637
#638
#639
#64
#640
#641
#642
#643
#644
#645
#646
#647
#648
#649
#65
#650
#651
#652
#653
#654
#655
#655
#656
#657
#658
#659
#66
#660
#661
#662
#663
#664
#665
#666
#667
#668
#669
#67
#670
#671
#672
#673
#674
#675
#676
#677
#677
#678
#679
#680
#681
#682
#683
#684
#685
#686
#687
#688
#689
#690
#691
#692
#693
#694
#695
#696
#697
#698
#699
#7
#70
#700
#701
#702
#703
#704
#705
#706
#706
#707
#708
#709
#71
#710
#711
#712
#713
#714
#715
#716
#717
#718
#719
#719
#72
#720
#720
#721
#722
#723
#724
#725
#726
#727
#728
#729
#73
#730
#731
#732
#733
#734
#735
#736
#737
#738
#739
#740
#740
#741
#741
#742
#743
#744
#745
#746
#747
#748
#749
#75
#750
#751
#752
#753
#754
#755
#756
#757
#758
#759
#76
#760
#761
#762
#763
#764
#765
#766
#767
#768
#769
#770
#771
#772
#773
#774
#775
#775
#776
#777
#778
#779
#780
#781
#782
#783
#784
#785
#786
#787
#788
#789
#79
#790
#791
#792
#793
#794
#795
#796
#797
#798
#799
#799
#8
#8
#800
#801
#802
#803
#804
#805
#806
#807
#807
#808
#808
#809
#809
#810
#810
#811
#811
#82
#83
#85
#86
#87
#88
#92
#93
#94
#96
#97
#98
#99
1.0
2.0
2.1
3.0
4.0
4.1
4.2
-
20ee859fa1Merge 7dfb6bccd19a6f83eb8a3bbc9a9d9dca40f87172 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
Pranaww
2025-12-30 06:35:31 +0000 -
7dfb6bccd1Add SSRF via ESI Injection reference
Pranaww
2025-12-30 12:02:43 +0530 -
bb3c8d94ccMerge e14f249e624b901d429769d8624ac87ed0f35ff8 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
RelunSec
2025-12-24 18:42:38 +0000 -
e14f249e62Add 'Bypass With An Alias' section to README
RelunSec
2025-12-24 10:42:19 -0800 -
61f04037adMerge a522e1acf3d9f2f4d2507e47b6a4b48df8a35a8a into 39da0328b8bcd85e38e0a187ffee92689acebdbf
Alexandre ZANNI
2025-12-19 22:22:59 +0530 -
2b3c713cdeMerge c975f61fa0cfa71ac87af5f459e5c735f6767467 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
RelunSec
2025-12-19 15:49:00 +0000 -
c975f61fa0Fix typo in README regarding URL formatting
RelunSec
2025-12-19 07:48:57 -0800 -
09bdd83685Update README with URL parsing examples
RelunSec
2025-12-18 23:41:37 -0800 -
1a462e14c3Merge b1b5e06189f8d2bf1e2c95c832cbb7ab68f6c859 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
Siddharth Dushantha
2025-12-15 11:35:53 +0100 -
5b8b6cb055Merge a957c3f96d8fa5616099b0eefffca10ed318ec57 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
Brumens
2025-12-15 11:30:25 +0100 -
a957c3f96d
Fixed markdown linting
brumens
2025-12-15 11:30:06 +0100 -
e408b82a02Merge 933651f6cd3d1c11fd2a122211418028a6214d65 into 39da0328b8bcd85e38e0a187ffee92689acebdbf
nerrow
2025-12-12 23:48:14 -0800 -
ad6b49525f
Deployed 39da032 with MkDocs version: 1.6.1
gh-pages
Swk
2025-12-12 10:33:55 +0000 -
39da0328b8
Indicators for deserialization
master
Swissky
2025-12-12 11:32:33 +0100 -
ba62eed782
SQLite extensions
Swissky
2025-12-07 19:52:51 +0100 -
5f1a39d272
Added author to research reference
brumens
2025-12-03 14:09:02 +0100 -
3cf745b90c
Added Jinja and Mako obf payloads
brumens
2025-12-03 14:07:37 +0100 -
e2ce1c96dc
Added Smarty and Twig obf payload
brumens
2025-12-03 14:05:41 +0100 -
7ca2ca2a75
Added Groovy and FreeMarker obf payloads
brumens
2025-12-03 13:58:49 +0100 -
52daa1d820
Updated SSTI Reference
brumens
2025-12-03 13:58:27 +0100 -
933651f6cdAdd JSON format for SQL Injection payloads
Claude
2025-11-16 16:38:19 +0000 -
78882b4a5dAdd JSON format for XSS payloads
Claude
2025-11-16 16:13:08 +0000 -
ca50df2336
Fix markdown linting
Swissky
2025-11-15 17:36:38 +0100 -
80a6b5e1d0Merge pull request #806 from Reelix/patch-1
Swissky
2025-11-15 11:34:17 -0500 -
e653e7c67bMerge pull request #802 from Aaditya-Chunekar/patch-1
Swissky
2025-11-15 11:31:35 -0500 -
24527a5155Merge pull request #791 from piranhaAD/patch-1
Swissky
2025-11-15 11:19:05 -0500 -
832b54fd95
Syntax Highlighting SSTI
Swissky
2025-11-15 17:11:42 +0100 -
5c0ee4c6d9
SQL injection hashed password + MSSQL links
Swissky
2025-11-02 18:21:19 +0100 -
3359054ecfFixed missing {FILE} placeholders
Reelix
2025-10-31 14:22:13 +0200 -
8f742a0f79
Add advanced XSS polyglot payloads and explanations to 2 - XSS Polyglot.md
Gunashekar31742
2025-10-31 09:44:01 +0530 -
15c39dafe6
Add delete http request leading to sql injection on unprotected endpoints
Szymon Błaszczyński
2025-10-28 00:42:59 +0100 -
2f86d21e94Update README.md
YuhanCatherineDong
2025-10-22 10:11:19 -0700 -
9a08798848hacktoberfest - Update YouTube.md with new resources
Aaditya
2025-10-22 19:44:31 +0530 -
615a964002
Fix: update broken OWASP CSRF link in Cross-Site Request Forgery README
yatinannam
2025-10-18 20:57:53 +0530 -
514946f41b
feat(dependency-confusion): add Nodesecure/scanner in tools
cgombauld
2025-10-17 14:52:54 +0200 -
a522e1acf3add code review section with Java examples
Alexandre ZANNI
2025-10-13 20:44:17 +0200 -
7e8972eddcpcarm
Om Gedam
2025-10-13 17:40:29 +0530 -
d49faf9874
Markdown Fix Lint
Swissky
2025-10-05 18:54:42 +0200 -
0dc0978853
Brute Force and Rate Limit
Swissky
2025-10-05 18:51:11 +0200 -
fc06c0e13bMerge pull request #797 from mbiesiad/master
Swissky
2025-10-02 10:40:26 -0400 -
ff57c499ccUpdate Web Attack Surface.md
Michal Biesiada
2025-10-02 10:50:07 +0200 -
8cf79275a6Merge pull request #795 from cclauss/patch-1
Swissky
2025-10-01 12:47:14 -0400 -
87703ab9a5
feat: Add resources for Model Context Protocol (MCP)
Hare Krishna Rai
2025-10-01 14:40:56 +0000 -
6409004743Update GitHub Actions
Christian Clauss
2025-10-01 14:52:10 +0200 -
707c06272fUpgrade GitHub Actions
Christian Clauss
2025-10-01 14:49:34 +0200 -
bd5b09a85bMerge pull request #793 from DivInstance/chore/mkdocs-edit-link-and-readme-polish
Swissky
2025-09-19 08:48:05 -0400 -
2c93f31607
ci: modernize mkdocs deploy workflow\n\n- Use checkout@v4 and setup-python@v5 with Python 3.11\n- Remove duplicate checkout and incorrect submodule add\n- Consolidate and pin mkdocs dependencies\n- Build separately with --strict before gh-deploy
Divyaranjan Sahoo
2025-09-19 15:15:40 +0530 -
3be0e164ab
chore(docs): fix MkDocs edit link and polish README grammar
Divyaranjan Sahoo
2025-09-19 15:13:54 +0530 -
ebf2b0d912Merge pull request #792 from pranjalpokharel7/master
Swissky
2025-09-13 08:15:02 -0400 -
27e6c2aa8d
Replace broken link for SQLite with archive link
pranjalpokharel7
2025-09-12 18:19:26 +0545 -
aa85b80acecorrection of xxe ssrf payload
piranha
2025-09-09 19:16:45 +0100 -
b391de2117
Lint fix
Swissky
2025-08-14 11:09:47 +0200 -
72df15e2e8Merge pull request #786 from n3rada/master
Swissky
2025-08-13 20:39:34 +0200 -
f3cdd4ff0cfix(markdown): add blank lines around fenced code blocks to satisfy MD031
n3rada
2025-08-13 18:29:00 +0000 -
d04a38a67crefactor(template): rename Velocity payload variables for clarity
n3rada
2025-08-13 18:14:47 +0000 -
2f9f87bfaeMerge pull request #777 from youknowwho-98/patch-1
Swissky
2025-08-13 16:07:06 +0200 -
0c5b7c3953Merge pull request #774 from 1PingSun/master
Swissky
2025-08-13 16:04:43 +0200 -
ad79082eb4Merge pull request #784 from HackingRepo/patch-2
Swissky
2025-08-13 12:54:25 +0200 -
cc670aa544
SQL injection - Fix linting errors
Swissky
2025-08-13 12:07:35 +0200 -
b10a11041cMerge pull request #790 from KadirArslan/master
Swissky
2025-08-13 12:07:13 +0200 -
81b3f85dc4Merge pull request #776 from m14r41/patch-1
Swissky
2025-08-13 11:52:43 +0200 -
6cb0048e22Update README.md
Swissky
2025-08-13 11:52:26 +0200 -
5e0b097983
Virtual Hosts + Encoding and Transformations
Swissky
2025-08-12 20:59:36 +0200 -
cc96a3566d
Update README.md
Kadir Arslan
2025-08-06 22:30:25 +0300