danielmiessler / SecLists
SecLists is the security tester's companion. It's a collection of multiple types of lists used during security assessments, collected in one place. List types include usernames, passwords, URLs, sensitive data patterns, fuzzing payloads, web shells, and many more.
Networkapbridge / dll-decryptor
dll decryptor — dumps encrypted DLL payloads, resolves imports, rebuilds PE headers, exports or memory-maps the decrypted module
hak5 / usbrubberducky-payloads
The Official USB Rubber Ducky Payload Repository
sheeki03 / tirith
Terminal security for developers and AI agents. Intercepts homograph URLs, pipe-to-shell, ANSI injection, obfuscated payloads, data exfiltration, and malicious AI skills/configs before they execute.
rapid7 / metasploit-payloads
Unified repository for different Metasploit Framework payloads
aleff-github / my-flipper-shits
Free and libre source BadUSB payloads for Flipper Zero. [Windows, GNU/Linux, iOS]
Ishanoshada / GDorks
Google Dork List - Uncover the Hidden Gems of the Internet ( There are at least 320+ categories ) + Web App
coffinxp / payloads
—
eslam3kl / SQLiDetector
Simple python script supported with BurpBouty profile that helps you to detect SQL injection "Error based" by sending multiple requests with 14 payloads and checking for 152 regex patterns for different databases.
itsPLK / ps5-payload-manager
A modern, web-based dashboard to easily manage, import, and automatically load payloads on your PS5.
probot / smee-client
🔴 Receives payloads then sends them to your local server
hak5 / wifipineapplepager-payloads
The Official WiFi Pineapple Pager Payload Repository
magikh0e / FlipperZero_Stuff
Curated Flipper Zero collection: custom firmware, Sub-GHz & IR captures, NFC/RFID, BadUSB payloads, external hardware, plus apps, tools, and reference links
shinthink / blitzstrike
Blitz Strike — a universal MCP security-audit toolbelt. Reconnaissance at speed. Analysis in depth. Validation before report.
zer0condition / GoodmansKernel
Run unsigned kernel payloads in a signed kernel driver via wasm3. No JIT/W^x (HVCI/etc., compliant)
KorekKayu / IKONA-Security
🛡️ Comprehensive Cybersecurity Arsenal, Bug Bounty Payloads & Security Audit Tools by IKONA ONI
dahan6 / whetstones-lab
Whetstones Lab: measuring coevolution between adaptive malware and behavioral defense. De-weaponized research release — genomes, evolution rounds, telemetry, training harness (stubbed primitives), and lab range tooling. Payloads, real primitives, and C2 infrastructure intentionally withheld. Research and defensive use only.
zmodelerlover / OpenNR-Installer
Finds your games, fetches and verifies the payloads, installs ReShade and the DLSS-NR add-on
daniomass / SliverMirage
Crystal Palace PICO loader for Sliver C2 dual-layer AMSI bypass, ETW silencing, AES-256-CBC encrypted payloads, 6 delivery variants
alex193a / Root-My-Pixel-Payloads
Exploit payloads for Root My Pixel
kyle41111 / BinarySoap
A python proof of concept tool to assist in your payloads classification against EDR/AV's machine learning models
SagarBiswas-MultiHAT / The-BlackHAT-roadmap
The complete hacking & penetration testing roadmap. From beginner to elite. 44,982 lines, 150+ Diagram across the roadmap: OPSEC, web security, Active Directory, binary exploitation, EDR evasion, and 0-day research. 300+ tools, 200+ MITRE techniques, C & Rust payloads, lab guides, books, courses, blogs, practice platforms, and AI security resources
nastea1 / dc34badge
DC34 Baosec-lite badge: capturing both secrets without developer mode. Payloads, decoders, full walkthrough.
shaheeryasirofficial / ClickMyPayload
ClickMyPayload creates realistic browser verification pages that silently copy PowerShell or CMD commands to the clipboard, display decoy tokens, and guide users to execute them via Win+R. Optional binary payloads can download automatically on page load