PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF
PayloadsAllTheThings logo

Payloads All The Things A list of useful payloads and bypasses for Web Application Security.

Documentation

Every section contains the following files:

  • README.md: vulnerability description and how to exploit it, including several payloads
  • Intruder: a set of files to give to Burp Intruder
  • Images: pictures for the README.md
  • Files: some files referenced in the README.md

Contributions

Be sure to read CONTRIBUTING.md

Sponsors

This project is proudly sponsored by these companies:

VAADATA Project Discovery





> Visit PayloadsAllTheThings Website <