danielmiessler / SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Networkapbridge / dll-decryptor
dll decryptor — dumps encrypted DLL payloads, resolves imports, rebuilds PE headers, exports or memory-maps the decrypted module
xvvulcanvx / PS5-TabShifter
Standalone PS5 on-console payload to move apps between Games/Media tabs and hide offline PSN bloatware (FW 12.xx – 13.60 Supported)
aarvsn / PS5Droid
Android games on your PS5
Epinorr / y2jb-update-blocker
A PlayStation 5 payload for blocking YouTube update metadata
ghost1372 / WelcomeHubActivator
A PS5 ELF payload that enables the Welcome Hub.
MiladRTX / Breeze
Custom fan curve for the PS5: a payload with a web panel and a home screen app. Live CPU and GPU temps, 24-hour history and presets.
shaheeryasirofficial / Cuban-Eight
Cuban Eight is a red team tool that packages a Windows PE payload into a .wsl file spoofing a real Linux distro installer. Double-click to deploy.
payloadcms / payload
Payload is the open-source, fullstack Next.js framework, giving you instant backend superpowers. Get a full TypeScript backend and admin panel instantly. Use Payload as a headless CMS or for building powerful applications.
hak5 / usbrubberducky-payloads
The Official USB Rubber Ducky Payload Repository
leebaird / discover
Custom Bash and Python scripts used to automate various penetration testing tasks including recon, scanning, enumeration, and malicious payload creation using Metasploit. For use with Ubuntu. Limited support for Kali Linux.
kevoreilly / CAPEv2
Malware Configuration And Payload Extraction
ssut / payload-dumper-go
an android OTA payload dumper written in Go
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
zakirkun / deep-eye
Deep Eye orchestrates multiple AI providers (OpenAI, Claude, Grok, Gemini, OLLAMA, Groq, Mistral, OpenRouter, LiteLLM, LM Studio) for intelligent payload generation, scans targets for 45+ vulnerability types, and produces professional reports with compliance mapping.
rapid7 / metasploit-payloads
Unified repository for different Metasploit Framework payloads
FalsePhilosopher / badusb
Flipper Zero badusb payload library
aleff-github / my-flipper-shits
Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]
wgpsec / AboutSecurity
Everything for pentest. | 渗透测试知识库，以 AI Agent 可执行的格式沉淀安全方法论。
SonicJs-Org / sonicjs
SonicJS - The edge-native headless CMS for Cloudflare Workers. Sub-100ms response times, zero cold starts, TypeScript-first. Built on D1, R2, and Hono.
ReaJason / MemShellParty
一款专注于 Java 主流 Web 中间件的内存马快速生成工具，致力于简化安全研究人员和红队成员的工作流程，提升攻防效率
linuxboot / heads
A minimal Linux that runs as a coreboot or LinuxBoot(UEFI's DXE replacement) ROM payload to provide a secure, flexible boot environment for laptops, workstations and servers.
Morsmalleo / AhMyth
Cross-Platform Android Remote Administration Tool | Official maintained repository for the AhMyth R.A.T Project | A dedicated revival of the original repository at https://GitHub.com/AhMyth/AhMyth-Android-RAT
Athena-OS / athena
Athena OS is a Arch/Nix-based distro focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!
itsPLK / ps5-webkit-autoloader
An automated payload loader for exploited PS5 consoles
hahwul / jwt-hack
JSON Web Token Hack Toolkit
saawant12 / orbit-store-ps5
A modern PS5 download manager with a native TV app, phone controls and Orbit Zero for Mac, Windows and Linux.
GhostTroops / TOP
TOP All bugbounty pentesting CVE-2023- POC Exp RCE example payload Things
Ishanoshada / GDorks
Google Dork List - Uncover the Hidden Gems of the Internet ( There are at least 320+ categories ) + Web App
coffinxp / payloads
—
eslam3kl / SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
payloadcms / website
The official Next.js website for payloadcms.com
itsPLK / ps5-payload-manager
A modern, web-based dashboard to easily manage, import, and automatically load payloads on your PS5.
SecNN / AiScan-N
AiScan-N 来了！这是一款基于人工智能驱动的Ai自动化网络安全（运维）工具，专注于网络安全评估、漏洞扫描、运维、应急响应、渗透测试自动化，Ai大模型工具集【CLI Agent】 ，Ai驱动的安全检测技术，提升安全测试（运维）效率，专为企业和个人用户打造，尤其适合初学者（小白）快速上手使用，让你轻松迈入智能安全攻防时代！适用场景 ：如（红队演练、CTF比赛、Web应用渗透测试、内网横向移动、密码破解与暴力攻击、流量分析与威胁检测、APT攻击模拟、漏洞赏金挑战等场景）🎥演示视频（文章中）：https://mp.weixin.qq.com/s/7lsUdbrxkDy4P5pZhEWv7Q
probot / smee-client
🔴 Receives payloads then sends them to your local server
miantiao-me / aigc-weekly
Agili 的 AIGC 周刊 - 一个由 Agentic AI Agent 驱动的 AIGC（人工智能生成内容）精选周刊。
ashbuilds / payload-ai
AI Plugin is a powerful extension for the Payload CMS, integrating advanced AI capabilities to enhance content creation and management.
dji-sdk / Payload-SDK
DJI Payload SDK Official Repository
hak5 / wifipineapplepager-payloads
The Official WiFi Pineapple Pager Payload Repository
magikh0e / FlipperZero_Stuff
Curated Flipper Zero collection: custom firmware, Sub-GHz & IR captures, NFC/RFID, BadUSB payloads, external hardware, plus apps, tools, and reference links
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
lennney / mcp-slim-guard
Context compression for MCP. Same upstream call, exact results recoverable.
X-F1REBALL-X / HearBridge-PS5
Play PS5 game audio on any Bluetooth headphones or earbuds. Payload for jailbroken PS5
zer0condition / GoodmansKernel
Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)
vulpy-io / vulpy-commerce-core
AI-run shop: Medusa v2 + Next.js + Payload CMS operated by Fox, the built-in AI assistant. Open-source free edition of Vulpy Commerce.
KorekKayu / IKONA-Security
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
Sev7eEn7 / dsh-sieve
dsh-sieve: context engineering & token optimization plugin for DeepSeek Harness (DSH) — tool output filtering, context pruning, progressive skill disclosure. 36% smaller payload in offline replay. DSH 上下文管理与 token 优化节省插件。
tsuramatsu1 / apr-emu-updater
PS5 payload that keeps APR Emu up to date on installed titles, from a web interface on the console.
dahan6 / whetstones-lab
Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.
zmodelerlover / OpenNR-Installer
Finds your games, fetches and verifies the payloads, installs ReShade and the DLSS-NR add-on
xXLoneWolf589Xx / snoop-recon-suite
40+ Modular Security Research and Pentesting Toolkit for OSINT Payload Generation 2026
zTPhilip / Snoop-Forge-Studio
SnoopBuilder 2026: PyQt5 Payload Builder for Python to EXE with Dual Compiler and Webhook Alerts
elripalda / psgfx
Custom icons and backgrounds for your PS5 homebrew and games. Works through PS5 Upload's payload.
holdmysocks / ps5-tailscale
Tailscale for jailbroken PS5: reach the console over your tailnet for Remote Play and stream to it with Moonlight/Sunshine (unofficial)
cloudpayload / chatpin
Chatpin puts your AI’s chat template under inspection and lock. Compare it with the publisher’s original, flag suspicious conditional logic, and pin the version you trust so unexpected changes fail CI before deployment. Built for GGUF and safetensors workflows. Your model has a chat template. Give it a tamper alarm.
n0qword / mythic_ornn
LLM-driven generator for Mythic Agents, Payload-Type and C2 Profiles.
shaheeryasirofficial / SmuggleMyPayload
SmuggleMyPayload generates HTML pages that embed and reconstruct files client-side using JavaScript. The toolkit offers multiple HTML Smuggling techniques, payload encoding options, JavaScript variations, and pre-built HTML templates.
kaandemir993 / DarkTortilla-RAT-Telegram-Exfiltration-Payload-Extraction-Analysis
Reverse engineering analysis of DarkTortilla RAT, a sophisticated malware that steals credit card data, decrypts browser passwords, and exfiltrates via Telegram, SMTP, and FTP.
daniomass / SliverMirage
Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants
MoHadiShibli / Control4Free
Use your phone or PC as a PS4 Virtual DualShock everywhere: The menus, and in every game. A GoldHEN payload with up to four virtual DualShock 4 controllers.