swisskyrepo/PayloadsAllTheThings resource

Health v2 · maintenance only

Adoption not part of the score

80407 stars · 17326 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-29, confidence not recorded

A curated collection of payloads, bypasses, and exploitation techniques for web application security testing. It serves as a reference cheatsheet for penetration testers, bug bounty hunters, and CTF players, organized by vulnerability type with Burp Intruder files and methodology notes.

Use cases

• find sql injection payloads for a pentest
• learn file upload bypass techniques
• prepare for a CTF web challenge
• look up privilege escalation methods
• build a bug bounty methodology
• get wordlists for Burp Intruder
• study server-side template injection examples

When to choose

• you need a quick reference of exploitation payloads and bypass techniques
• you are doing web application penetration testing or bug bounty work
• you are learning offensive security or practicing CTF challenges

When to avoid

• you need an automated vulnerability scanner rather than a manual reference
• you want defensive hardening guidance instead of offensive techniques
• you need a runnable tool rather than documentation

Facets

learning-resource · maturity active

security penetration-testing vulnerability-scanning developer-tools security penetration-testing web-development tutorials cross-platform cheatsheet payloads bugbounty redteam ctf web-application-security privilege-escalation bypass

Member repositories

For agents

markdown · JSON · MCP: product_card(name="swisskyrepo/PayloadsAllTheThings")