mirror of
https://github.com/swisskyrepo/PayloadsAllTheThings.git
synced 2024-12-19 19:06:12 +00:00
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
bountybugbountybypasscheatsheetenumerationhackinghacktoberfestmethodologypayloadpayloadspenetration-testingpentestprivilege-escalationredteamsecurityvulnerabilityweb-application
| AWS Amazon Bucket S3 | ||
| CRLF injection | ||
| CSV injection | ||
| CVE Exploits | ||
| File Inclusion - Path Traversal | ||
| Insecured source code management | ||
| Java Deserialization | ||
| LaTeX injection | ||
| LDAP injection | ||
| Methodology and Resources | ||
| NoSQL injection | ||
| OAuth | ||
| Open redirect | ||
| PHP juggling type | ||
| PHP serialization | ||
| Remote commands execution | ||
| Server Side Template injections | ||
| SQL injection | ||
| SSRF injection | ||
| Tar commands execution | ||
| Traversal directory | ||
| Upload insecure files | ||
| Web cache deception | ||
| XPATH injection | ||
| XSS injection | ||
| XXE injection | ||
| .gitignore | ||
| README.md | ||
Payloads All The Things
A list of useful payloads and bypasses for Web Application Security.
Feel free to improve with your payloads and techniques !
I <3 pull requests :)
You can also contribute with a beer IRL or 
Every section contains:
- README.md - vulnerability description and how to exploit it
- Intruders - a set of files to give to Burp Intruder
- Some exploits
You might also like :
- Methodology and Resources
- CVE Exploits
- Apache Struts 2 CVE-2017-5638.py
- Apache Struts 2 CVE-2017-9805.py
- Drupalgeddon2 CVE-2018-7600.rb
- Heartbleed CVE-2014-0160.py
- Shellshock CVE-2014-6271.py
- Tomcat CVE-2017-12617.py
Try Harder
Ever wonder where you can use your knowledge ? The following list will help you find "targets" to improve your skills.
- Bug Bounty Platforms
- Online Platforms
- Hack The Box
- Penetration test lab "Test lab" | Pentestit
- PentesterLab : Learn Web Penetration Testing: The Right Way
- Zenk-Security
- Root-Me
- W3Challs
- NewbieContest
- Vulnhub
- The Cryptopals Crypto Challenges
- alert(1) to win
- Hacksplaining
- HackThisSite
- Hackers.gg
- Mind Map - Penetration Testing Practice Labs - Aman Hardikar
Book's list
Grab a book and relax, these ones are the best security books (in my opinion).
- Web Hacking 101
- Breaking into Information Security: Learning the Ropes 101 - Andrew Gill
- OWASP Testing Guide v4
- Penetration Testing: A Hands-On Introduction to Hacking
- The Hacker Playbook 2: Practical Guide to Penetration Testing
- The Hacker Playbook 3: Practical Guide to Penetration Testing - Red Team Edition
- The Mobile Application Hacker’s Handbook
- Black Hat Python: Python Programming for Hackers and Pentesters
- Metasploit: The Penetration Tester's Guide
- The Database Hacker's Handbook, David Litchfield et al., 2005
- The Shellcoders Handbook by Chris Anley et al., 2007
- The Mac Hacker's Handbook by Charlie Miller & Dino Dai Zovi, 2009
- The Web Application Hackers Handbook by D. Stuttard, M. Pinto, 2011
- iOS Hackers Handbook by Charlie Miller et al., 2012
- Android Hackers Handbook by Joshua J. Drake et al., 2014
- The Browser Hackers Handbook by Wade Alcorn et al., 2014
- The Mobile Application Hackers Handbook by Dominic Chell et al., 2015
- Car Hacker's Handbook by Craig Smith, 2016
More resources
Blogs/Websites
- BUG BOUNTY FIELD MANUAL: THE DEFINITIVE GUIDE FOR PLANNING, LAUNCHING, AND OPERATING A SUCCESSFUL BUG BOUNTY PROGRAM
- How to become a Bug Bounty Hunter - Sam Houston
- Tips from Top Hackers – Bug Hunting methodology and the importance of writing quality submissions - Sam Houston
- ARNE SWINNEN'S SECURITY BLOG JUST ANOTHER INFOSEC BLOG
- XSS Jigsaw - innerht.ml
- ZeroSec Blog: Featuring Write-Ups, Projects & Adventures
Youtube
- Hunting for Top Bounties - Nicolas Grégoire
- BSidesSF 101 The Tales of a Bug Bounty Hunter - Arne Swinnen
- Security Fest 2016 The Secret life of a Bug Bounty Hunter - Frans Rosén
- IppSec Channel - Hack The Box Writeups
Docker
| Command | Link |
|---|---|
docker pull remnux/metasploit |
docker-metasploit |
docker pull paoloo/sqlmap |
docker-sqlmap |
docker pull kalilinux/kali-linux-docker |
official Kali Linux |
docker pull owasp/zap2docker-stable |
official OWASP ZAP |
docker pull wpscanteam/wpscan |
official WPScan |
docker pull infoslack/dvwa |
Damn Vulnerable Web Application (DVWA) |
docker pull danmx/docker-owasp-webgoat |
OWASP WebGoat Project docker image |
docker pull opendns/security-ninjas |
Security Ninjas |
docker pull ismisepaul/securityshepherd |
OWASP Security Shepherd |
docker-compose build && docker-compose up |
OWASP NodeGoat |
docker pull citizenstig/nowasp |
OWASP Mutillidae II Web Pen-Test Practice Application |
docker pull bkimminich/juice-shop |
OWASP Juice Shop |