mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2025-08-23 16:24:59 +02:00
55 lines
3.1 KiB
Markdown
55 lines
3.1 KiB
Markdown
# Payloads All The Things
|
|
|
|
A list of useful payloads and bypasses for Web Application Security.
|
|
Feel free to improve with your payloads and techniques !
|
|
I :heart: pull requests :)
|
|
|
|
You can also contribute with a :beers: IRL, or using the sponsor button
|
|
|
|
[](https://github.com/sponsors/swisskyrepo)
|
|
[](https://twitter.com/intent/tweet?text=Payloads%20All%20The%20Things,%20a%20list%20of%20useful%20payloads%20and%20bypasses%20for%20Web%20Application%20Security%20-%20by%20@pentest_swissky&url=https://github.com/swisskyrepo/PayloadsAllTheThings/)
|
|
|
|
An alternative display version is available at [PayloadsAllTheThingsWeb](https://swisskyrepo.github.io/PayloadsAllTheThings/).
|
|
|
|
<p align="center">
|
|
<img src="https://raw.githubusercontent.com/swisskyrepo/PayloadsAllTheThings/master/.github/banner.png" alt="banner">
|
|
</p>
|
|
|
|
## :book: Documentation
|
|
|
|
Every section contains the following files, you can use the `_template_vuln` folder to create a new chapter:
|
|
|
|
- README.md - vulnerability description and how to exploit it, including several payloads
|
|
- Intruder - a set of files to give to Burp Intruder
|
|
- Images - pictures for the README.md
|
|
- Files - some files referenced in the README.md
|
|
|
|
You might also like the other projects from the AllTheThings family :
|
|
|
|
- [InternalAllTheThings](https://swisskyrepo.github.io/InternalAllTheThings/) - Active Directory and Internal Pentest Cheatsheets
|
|
- [HardwareAllTheThings](https://swisskyrepo.github.io/HardwareAllTheThings/) - Hardware/IOT Pentesting Wiki
|
|
|
|
You want more ? Check the [Books](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/_LEARNING_AND_SOCIALS/BOOKS.md) and [Youtube channel](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/_LEARNING_AND_SOCIALS/YOUTUBE.md) selections.
|
|
|
|
## :technologist: Contributions
|
|
|
|
Be sure to read [CONTRIBUTING.md](https://github.com/swisskyrepo/PayloadsAllTheThings/blob/master/CONTRIBUTING.md)
|
|
|
|
<p align="center">
|
|
<a href="https://github.com/swisskyrepo/PayloadsAllTheThings/graphs/contributors">
|
|
<img src="https://contrib.rocks/image?repo=swisskyrepo/PayloadsAllTheThings&max=36" alt="sponsors-list" >
|
|
</a>
|
|
</p>
|
|
|
|
Thanks again for your contribution! :heart:
|
|
|
|
## :beers: Sponsors
|
|
|
|
This project is proudly sponsored by these companies.
|
|
|
|
| Logo | Description |
|
|
| --- | --- |
|
|
| [<img src="https://avatars.githubusercontent.com/u/34724717?s=40&v=4" alt="sponsor-serpapi">](https://serpapi.com) | **SerpApi** is a real time API to access Google search results. It solves the issues of having to rent proxies, solving captchas, and JSON parsing. |
|
|
| [<img src="https://avatars.githubusercontent.com/u/50994705?s=40&v=4" alt="sponsor-projectdiscovery">](https://projectdiscovery.io/) | **ProjectDiscovery** - Detect real, exploitable vulnerabilities. Harness the power of Nuclei for fast and accurate findings without false positives. |
|
|
| [<img src="https://avatars.githubusercontent.com/u/48131541?s=40&v=4" alt="sponsor-vaadata">](https://www.vaadata.com/) | **VAADATA** - Ethical Hacking Services |
|