PayloadsAllTheThings

Official Documentation

FreeFeatured

// DESCRIPTION

Payloads and bypasses for web security: XSS, SQLi, SSRF, SSTI, deserialization and much more.

payloadswebcheatsheetbug-bounty

65,000 stars

0 views

10/25/2026

The most complete pentesting techniques wiki: Linux, Windows, web, cloud, AD and more.

Curated list of Unix binaries that can be abused to escalate privileges, bypass restrictions or transfer files.

The Windows equivalent of GTFOBins: abusable native binaries, scripts and libraries.