GitHub repo leaderboard by stars, growth rate and activity.
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.
Tools and Techniques for Red Team / Penetration Testing
All about bug bounty (bypasses, payloads, and etc)
The LAZY script will make your life easier, and of course faster.
Git All the Payloads! A collection of web attack payloads.
Penetration tests guide based on OWASP including test cases, resources and examples.
ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting.
Everything for pentest. | 渗透测试知识库,以 AI Agent 可执行的格式沉淀安全方法论。
Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions.
| # | Repo | Language | Stars | 30-day trend | Last updated |
|---|---|---|---|---|---|
| 1 | A list of useful payloads and bypass for Web Application Security and Pentest/CTF | Python | 80,733 | — | last pushed 2 weeks ago |
| 2 | Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications. | TypeScript | 44,635 | — | last pushed 2 days ago |
| 3 | Tools and Techniques for Red Team / Penetration Testing | — | 9,700 | — | last pushed 5 months ago |
| 4 | All about bug bounty (bypasses, payloads, and etc) | — | 6,851 | — | last pushed 3 years ago |
| 5 | The LAZY script will make your life easier, and of course faster. | Shell | 4,330 | — | last pushed 5 years ago |
| 6 | Git All the Payloads! A collection of web attack payloads. | Shell | 3,980 | — | last pushed 3 years ago |
| 7 | Penetration tests guide based on OWASP including test cases, resources and examples. | — | 2,832 | — | last pushed 4 years ago |
| 8 | ezXSS is an easy way for penetration testers and bug bounty hunters to test (blind) Cross Site Scripting. | PHP | 2,336 | — | last pushed 2 months ago |
| 9 | Everything for pentest. | 渗透测试知识库,以 AI Agent 可执行的格式沉淀安全方法论。 | Python | 1,727 | — | last pushed 2 weeks ago |
| 10 | Chimera is a PowerShell obfuscation script designed to bypass AMSI and commercial antivirus solutions. | PowerShell | 1,598 | — | last pushed 5 years ago |
All · 11,474