swisskyrepo/PayloadsAllTheThings
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Build with Backblaze B2
SDKs, agent skills, IDE extensions, and reference pipelines from Backblaze Labs. All open source.
Loading star history...
Where it stands
Rank, growth pace and release cadence relative to everything GStars tracks.
No releases in the last 90 days; the most recent was 465 days ago, with 292 contributors on GitHub.
Peaked at #34 in the weekly ranking the week of Oct 12, its best in the past year.
Use Cases & Benefits
- Provides a comprehensive list of payloads and bypass techniques for web application security testing and penetration testing.
- Offers a well-organized, community-driven repository of practical payloads and exploitation methods that simplify vulnerability discovery and exploitation.
- Use for preparing and executing web application penetration tests with ready-to-use payloads and bypasses for common vulnerabilities.
- Use for learning and improving hacking skills by studying detailed vulnerability descriptions and exploitation techniques.
- Use for contributing new payloads and techniques to a collaborative security resource to support bug bounty and red team engagements.
Should you depend on it?
License terms, project hygiene and risks, from GitHub metadata and GStars' snapshots.
License
MIT
Permissive: commercial use, modification and redistribution are allowed with attribution.
Community files
- README: present
- Contributing guide: present
Watch-outs
No watch-outs from GStars' checks.
General guidance from repository metadata, not legal advice. How we score
From the README
A list of useful payloads and bypasses for Web Application Security. Feel free to improve with your payloads and techniques !
You can also contribute with a :beers: IRL, or using the sponsor button.
An alternative display version is available at PayloadsAllTheThingsWeb.
Every section contains the following files, you can use the
_template_vulnfolder to create a new chapter:You might also like the other projects from the AllTheThings family :
You want more ? Check the Books and Youtube channel selections.
Daily snapshots
Stars gained per day, and how forks and open issues moved, from GStars' daily snapshots
+2,461 stars over 86 days across 8 snapshot days; best day +6 on Sep 7.
Forks
17.6K+285
Open issues
39+5
Compared with peers in Security
Fastest-growing repositories GStars tracks in this cohort for the week of Nov 8, by 7-day star growth
| Repository | Stars | +7d | Health | Last release |
|---|---|---|---|---|
| cloudflare/security-audit-skill | 69.3K | +10.7K | 75 | — |
| vxcontrol/pentagi | 33.9K | +719 | 75 | 36 days ago |
| GyulyVGC/sniffnet | 42.3K | +422 | 75 | 111 days ago |
| soxoj/maigret | 39.9K | +332 | 60 | 87 days ago |
| Asymptote-Labs/agent-beacon | 3.4K | +315 | 75 | 1 day ago |
| swisskyrepo/PayloadsAllTheThings | 82.4K | — | 40 | 465 days ago |
| Category median | 39.9K | +422 | 75 | — |
Discover Repositories
Search across tracked repositories by name or description