PayloadsAllTheThings
by swisskyrepo · GitHub
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
⭐ Stars
79.3k
🍴 Forks
17.2k
🔥 Trending
+159 this week
📜 License
MIT
Commercial use OK📅 Created
2016
🔄 Last commit
6 days ago
🏷️ Category
bounty
💻 Language
You maintain this project?
Claim its page: indexed whatever its rank, translated into six languages, and enriched with what you write yourself.
📈 Star history
2026-07-122026-07-22
📄 About
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
❓ Frequently asked questions
What is PayloadsAllTheThings?
A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Is PayloadsAllTheThings open source?
PayloadsAllTheThings is an open-source project. It is released under the MIT license.
Is PayloadsAllTheThings free?
Yes. PayloadsAllTheThings is free and open source — you can use, modify and self-host it.
🏅 Maintainer of this project?
Add this live badge to your README — your GitHub stars and directory rank, refreshed daily.
[](https://opensourceai.tech/project/swisskyrepo-payloadsallthethings.html)
🧬 Related projects🧬 View the DNA map →
osmedeus
A Modern Orchestration Engine for Security
★ 6.5k · agentic-ai
BruteForceAI
Advanced LLM-powered brute-force tool combining AI intelligence with automated login attacks
★ 1.5k · ai
burp-ai-agent
Burp Suite extension that adds built-in MCP tooling, AI-assisted analysis, privacy controls, pa…
★ 1.4k · ai