Payload Open Source Projects

ALL IN ONE Hacking Tool For Hackers

Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.

JsonWebToken implementation for node.js http://self-issued.info/docs/draft-ietf-oauth-json-web-token.html

An open-source post-exploitation framework for students, researchers and developers.

Tools and Techniques for Red Team / Penetration Testing

Pupy is an opensource, cross-platform (Windows, Linux, OSX, Android) C2 and post-exploitation framework written in python and C

All about bug bounty (bypasses, payloads, and etc)

Web application fuzzer

Java implementation of JSON Web Token (JWT)

SpringBoot 相关漏洞学习资料，利用方法和技巧合集，黑盒安全评估 check list

One of the fastest alternative JSON parser for Go that does not require schema

Simple HTTP and REST client for Ruby, inspired by microframework syntax for specifying actions.

🎯 Cross Site Scripting ( XSS ) Vulnerability Payload List

A pure C# Open Source QR Code implementation

Awesome XSS stuff

The LAZY script will make your life easier, and of course faster.

🎯 SQL Injection Payload List

Git All the Payloads! A collection of web attack payloads.

PHPGGC is a library of PHP unserialize() payloads along with a tool to generate them, from command line or programmatically.

Deserialization payload generator for a variety of .NET formatters

Python Remote Administration Tool (RAT)

Web Push library for Node.js

an android OTA payload dumper written in Go

Platform-Agnostic Security Tokens

Malware Configuration And Payload Extraction

⚡ HTTP/2 Apple Push Notification Service (APNs) push provider for Go — Send push notifications to iOS, tvOS, Safari and OSX apps, using the APNs HTTP/2 protocol.

The Official Bash Bunny Payload Repository

Projects for security students

:fire: CHAOS is a free and open-source Remote Administration Tool that allow generate binaries to control remote operating systems.

Penetration tests guide based on OWASP including test cases, resources and examples.

Read-only mirror of https://review.coreboot.org/coreboot.git. Synced every hour. We don't handle Pull Requests.

End-to-end HTTP and REST API testing for Go.

Spot SDK repo

Java implementation of RSocket

netshell features all in version 2 powershell

🎯 Command Injection Payload List

ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.

C++ GUI for TegraRcmSmash (Fusée Gelée exploit for Nintendo Switch)

:cat2:Medusa是一个红队武器库平台，目前包括XSS平台、协同平台、CVE监控、免杀生成、DNSLOG、钓鱼邮件、文件获取等功能，持续开发中

Seamless JWT authentication for Rails API

Shiro550/Shiro721 一键化利用工具，支持多种回显方式

A burp extension that add some useful function to Context Menu 添加一些右键菜单让burp用起来更顺畅

Register and receive push notifications

Web Push library for PHP

Vue wrapper components for smooth-dnd

An open-source project in Golang to asess different API Security tools and WAF for detection logic and bypasses

Awesome tools to exploit Windows !

Android OTA payload dumper

AntiVirus Evasion Tool

react wrapper components for smooth-dnd

The BBC's Open Source Web Application. Contributions welcome! Used on some of our biggest websites, e.g.

JWT auth service using Spring Boot, Spring Security and MySQL

RubberDucky like payloads for DigiSpark Attiny85

:newspaper: A small module that implements GraphQL subscriptions for Node.js

Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.

Everything for pentest. | 用于渗透测试的 payload 和 bypass 字典.

Static site generation for Vue 3 on Vite

The XSS Hunter service - a portable version of XSSHunter.com

An opinionated lib to create actions and reducers for Redux

Python antivirus evasion tool