PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Recent spike this week

7d +0.25% +206 stars in 7d
30d Not tracked yet — first tracked 2026-09-02
90d Not tracked yet — first tracked 2026-09-02
Sep 2, 2026: 80,588 starsSep 3, 2026: 80,597 starsSep 5, 2026: 80,645 starsSep 6, 2026: 80,674 starsSep 7, 2026: 80,693 starsSep 8, 2026: 80,711 starsSep 9, 2026: 80,742 starsSep 10, 2026: 80,770 starsSep 11, 2026: 80,793 starsSep 12, 2026: 80,819 starsSep 13, 2026: 80,832 starsSep 14, 2026: 80,849 starsSep 15, 2026: 80,869 starsSep 16, 2026: 80,901 starsSep 17, 2026: 80,931 starsSep 18, 2026: 80,953 starsSep 19, 2026: 80,977 starsSep 20, 2026: 80,987 starsSep 21, 2026: 81,015 starsSep 22, 2026: 81,078 starsSep 23, 2026: 81,138 starsSep 24, 2026: 81,160 starsSep 25, 2026: 81,189 starsSep 26, 2026: 81,221 starsSep 27, 2026: 81,253 starsSep 28, 2026: 81,288 starsSep 29, 2026: 81,325 starsSep 30, 2026: 81,344 starsOct 1, 2026: 81,366 stars 80,58880,97781,366 Sep 2Oct 1

80,588 → 81,366 stars since Sep 2

80,547 Stars 17,431 Forks 36 Open issues
View on GitHub ↗ Visit site ↗
bountybugbountybypasscheatsheetenumerationhackinghacktoberfestmethodologypayloadpayloadspenetration-testingpentestprivilege-escalationredteamsecurityvulnerabilityweb-application