A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Your Essential Exam Companion for the Iamneo Portal & NPTEL Exams Disguised as NeoExamShield bypass

Best DDoS Attack Script Python3, (Cyber / DDos) Attack With 56 Methods

GTFOBins is a curated list of Unix-like executables that can be used to bypass local security restrictions in misconfigured systems.

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack and etc . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

渗透测试有关的POC、EXP、脚本、提权、小工具等---About penetration-testing python-script poc getshell csrf xss cms php-getshell domainmod-xss csrf-webshell cobub-razor cve rce sql sql-poc poc-exp bypass oa-getshell cve-cms

All about bug bounty (bypasses, payloads, and etc)

Selfhosted alternative to 12ft.io. and 1ft.io bypass paywalls with a proxy ladder and remove CORS headers from any URL

K8工具合集(内网渗透/提权工具/远程溢出/漏洞利用/扫描工具/密码破解/免杀工具/Exploit/APT/0day/Shellcode/Payload/priviledge/BypassUAC/OverFlow/WebShell/PenTest) Web GetShell Exploit(Struts2/Zimbra/Weblogic/Tomcat/Apache/Jboss/DotNetNuke/zabbix)

Pingtunnel is a tool that send TCP/UDP traffic over ICMP

This map lists the essential techniques to bypass anti-virus and EDR

Detect and bypass web application firewalls and protection systems

Crack Interface lockscreen, Metasploit and More Android/IOS Hacking

Penetration tests guide based on OWASP including test cases, resources and examples.

A simple browser extension to bypass YouTube's age verification, disable content warnings and watch age restricted videos without having to sign in!

A cloudflare verification bypass script for webscraping

[Deprecated, work in progress alternative: https://github.com/M2Team/NanaRun] Series of System Administration Tools

The goal of this repository is to document the most common techniques to bypass AppLocker.

从零学习Webshell免杀手册

Cloudflare, Sucuri, Incapsula real IP tracker.

Cloudflare超级代理，无服务器代理，Duckduckgo代理（可用AI聊天，包含GPT4o/Claude3），Github加速，支持解锁Libgen，在线代理。现已支持多平台部署。Cloudflare super proxy, setting up a free serverless proxy by using Cloudflare worker, support Duckduckgo / Libgen. Now you can deploy this project on different platforms.

A big list of Android Hackerone disclosed reports and other resources.

Solve Google reCAPTCHA in less than 5 seconds! 🚀

A Python library to utilize AWS API Gateway's large IP pool as a proxy to generate pseudo-infinite IPs for web scraping and brute forcing.

Undetectable Windows Payload Generation

Miscellaneous exploit code

🚫 Advanced tool for security researchers to bypass 403/40X restrictions through smart techniques and adaptive request manipulation. Fast. Precise. Effective.

Check your WAF before an attacker does

🔓 Disable SSL verification and pinning on Android, system-wide

Bypass MDM Setup for MacOS, up to MacOS Tahoe 26.3