Gives you one-liners that aids in penetration testing operations, privilege escalation and more

linux database pentesting-windows hacking penetration-testing reverse multiplatform kali-linux oses hacking-tool one-liner windows-hacking metasploit liner pentest-tool one-liners web-delivery web-based-attacks payloads-database liners-database

• Updated Dec 9, 2025
• Python

AppSec Payloads Arsenal for Pentration Tester and Bug Bounty Hunters

penetration-testing bugbounty payload payloads payloads-database bugbounty-tool

• Updated Oct 6, 2026
• PHP

SSTI – Advanced / Polyglot Payloads

penetration-testing payloads ssti payloads-database payloadbox ssti-payloads payloads-cheatsheet ssti-detection

• Updated Jan 24, 2026

A local web interface for Ronin.

ruby spider local webapp nmap infosec recon hacktoberfest network-scanning exploit-database masscan security-tools dry-types dry-validation payloads-database dry-schema roninrb

• Updated Jan 13, 2026
• Ruby

OWASP Hunting: Curated Payloads for Ethical Security Testing and Bug Bounty

xss owasp cybersecurity rce pentesting bugbounty payload hacker payloads bb ethical-hacking red-team vulnerability-research payloads-database payloads-life bugbounty-tools payloads-cheatsheet payloads-memory payloads-creator

• Updated Nov 12, 2026
• Python

WAF Bypass Payload List

payload payloads waf-bypass payloads-database payloadbox waf-bypass-tool payloads-cheatsheet

• Updated Jan 10, 2026

Monitoring tool to detect patterns or IOCs (strings, regex, VirusTotal) and alert you and your team via console, Telegram or SMS written in Rust. 🦀

rust alert monitoring cross-platform alerting hash notification cross-compiler virustotal telegrambot redteam blazing-fast payloads-database redteaming-tools

• Updated Feb 17, 2026
• Rust

Cross Site Scripting Cheat sheet.

hacking xss webapp xss-vulnerability hacktoberfest cheatsheets cross-site-scripting payloads-database

• Updated Apr 3, 2021

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

security web-application vulnerability bugbounty payloads hacking-tool privilege-escalation vulnerability-scanners security-automation web-application-security privilege-escalation-exploits penetration-testing-tools payloads-database bugbountytips bugbounty-tool payloads-cheatsheet

• Updated Sep 9, 2024
• Python

Sec-Payloads, It's a collection of multiple types of lists used during security assessments & used for bug bounty hunting or penetration testing, collected in one place. List types include xss, sqli, sensitive data patterns, fuzzing payloads, web shells, and many more.

penetration-testing bugbounty seclists payloads payloads-database

• Updated Nov 17, 2025
• PHP

HTTP Request Smuggling Payload List

penetration-testing payload payloads penetration-test payloads-database http-request-smuggling payloadbox payloads-cheatsheet

• Updated Jan 10, 2026

Detect and fix code vulnerabilities by running AI-driven adversarial checks that simulate attacks and verify secure, correct fixes automatically.

alert blind hackers bug xss xss-vulnerability easy bugbounty xss-scanner xss-detection payload payloads xss-attacks owasp-top-10 android-pentest payloads-database learn2hack bugbounty-tool bugbounty-writeups android-cookbook

• Updated Oct 12, 2026
• JavaScript

shell bash web-performance hacking nmap pentesting bash-script payloads hacking-tool dork bash-scripting reconnaissance dork-scanning xxe-payloads xss-payloads payloads-database dork-list go-script shell-scrpit

• Updated Dec 16, 2022
• Shell

A highly automated and modular bug bounty reconnaissance toolkit integrating over 15 industry-standard tools for streamlined subdomain enumeration, vulnerability detection, and OSINT gathering. Designed for efficiency, scalability, and precision in real-world security assessments.

education osint hackers scanner enumeration web-security pentesting recon payload blueteam reconnaissance bughunter payloads-database bug-bounty-hunters

• Updated Apr 26, 2025
• Python