danielmiessler / SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Networkapbridge / dll-decryptor
dll decryptor — dumps encrypted DLL payloads, resolves imports, rebuilds PE headers, exports or memory-maps the decrypted module
itsPLK / ps5-payload-manager
A modern, web-based dashboard to easily manage, import, and automatically load payloads on your PS5.
zmodelerlover / OpenNR-Installer
Finds your games, fetches and verifies the payloads, installs ReShade and the DLSS-NR add-on
hak5 / usbrubberducky-payloads
The Official USB Rubber Ducky Payload Repository
Nour833 / StegoForge
The ultimate steganography and digital forensics toolkit. Hide and extract data across images, audio, video, documents, and network packets, or run 11 advanced detection engines to uncover hidden payloads.
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
aleff-github / my-flipper-shits
Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]
hak5 / wifipineapplepager-payloads
The Official WiFi Pineapple Pager Payload Repository
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
rapid7 / metasploit-payloads
Unified repository for different Metasploit Framework payloads
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
Ishanoshada / GDorks
Google Dork List - Uncover the Hidden Gems of the Internet ( There are at least 320+ categories ) + Web App
probot / smee-client
🔴 Receives payloads then sends them to your local server
magikh0e / FlipperZero_Stuff
Curated Flipper Zero collection: custom firmware, Sub-GHz & IR captures, NFC/RFID, BadUSB payloads, external hardware, plus apps, tools, and reference links
KorekKayu / IKONA-Security
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
daniomass / SliverMirage
Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants
alex193a / Root-My-Pixel-Payloads
Exploit payloads for Root My Pixel
nastea1 / dc34badge
DC34 Baosec-lite badge: capturing both secrets without developer mode. Payloads, decoders, full walkthrough.
shaheeryasirofficial / ClickMyPayload
ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load
coffinxp / payloads
—
eslam3kl / SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
zer0condition / GoodmansKernel
Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)
kyle41111 / BinarySoap
A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models
dahan6 / whetstones-lab
Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.