MADE WITH
PAYLOAD CMS

AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads. Maintained by ANG13T on GitHub, where it has earned 285 stars from the community.

Armor is a simple Bash script designed to create encrypted macOS payloads capable of evading antivirus scanners. Maintained by tokyoneon on GitHub, where it has earned 278 stars from the community.

RAT-el is an open source penetration test tool that allows you to take control of a windows machine. It works on the client-server model, the server sends commands and the client executes the commands and sends the result back to the server. The client is completely undetectable by anti-virus software. Maintained by FrenchCisco on GitHub, where it has earned 277 stars from the community.

Pakkero is a binary packer written in Go made for fun and educational purpose. Its main goal is to take in input a program file (elf binary, script, even appimage) and compress it, protect it from tampering and intrusion. Maintained by 89luca89 on GitHub, where it has earned 276 stars from the community.

Fully functional, from-scratch alternative to the Cobalt Strike Beacon (red teaming tool), offering transparency and flexibility for security professionals and enthusiasts. Maintained by ElJaviLuki on GitHub, where it has earned 270 stars from the community.

Web3 Ultimate Execution Engine. Maintained by gear-tech on GitHub, where it has earned 264 stars from the community.

SPY BOMB is a tool used to generate various payloads for android,windows,ios,mac and many more it is very user friendly tool. Maintained by BYTEHACKING-CREATIVE on GitHub, where it has earned 261 stars from the community.

This are different types of download cradles which should be an inspiration to play and create new download cradles to bypass AV/EPP/EDR in context of download cradle detections. Maintained by VirtualAlllocEx on GitHub, where it has earned 258 stars from the community.

Android. Maintained by Smart-Paocai on GitHub, where it has earned 254 stars from the community.

Athena OS Nix configuration files focused on Cybersecurity. Learn, practice and enjoy with any hacking tool!. Maintained by Athena-OS on GitHub, where it has earned 252 stars from the community.

CamRaptor is a tool that exploits several vulnerabilities in popular DVR cameras to obtain network camera credentials. Maintained by EntySec on GitHub, where it has earned 247 stars from the community.

Complex payload encoder. Maintained by ffuf on GitHub, where it has earned 244 stars from the community.

A polyglot payload generator. Maintained by redcode-labs on GitHub, where it has earned 243 stars from the community.

Translator from USB-Rubber-Ducky payloads to a Digispark code. Maintained by toxydose on GitHub, where it has earned 232 stars from the community.

Tool for generation samples based on OpenAPI(fka Swagger) payload/response schema. Maintained by Redocly on GitHub, where it has earned 228 stars from the community.

This script allows you to steal some informations from a computer. Maintained by tuconnaisyouknow on GitHub, where it has earned 226 stars from the community.

A better version of Xencrypt.Xencrypt it self is a Powershell runtime crypter designed to evade AVs. Maintained by GetRektBoy724 on GitHub, where it has earned 225 stars from the community.

Analysing parameters with all payloads' bypass methods, aiming at benchmarking security solutions like WAF. Maintained by wafpassproject on GitHub, where it has earned 222 stars from the community.

The BackDoor of HIPHP gives you the power to control websites based on PHP using HTTP/HTTPS protocol. By sending files, tokens and commands through port 80's POST/GET method, users can access a range of activities such as downloading and editing files. It also allows for connecting to Tor networks with password protection for extra security. Maintained by yasserbdj96 on GitHub, where it has earned 219 stars from the community.

Extends payload CMS with Meta's lexical RichText editor - a much more advanced and customizable richtext editor. Maintained by AlessioGr on GitHub, where it has earned 212 stars from the community.

A Payload CMS 3 plugin for Auth.js/NextAuth 5. Maintained by CrawlerCode on GitHub, where it has earned 206 stars from the community.

Yet another C++ Cobalt Strike beacon dropper with Compile-Time API hashing and custom indirect syscalls execution. Maintained by ProcessusT on GitHub, where it has earned 201 stars from the community.

Plugin for PayloadCMS to integrate OAuth2. Maintained by WilsonLe on GitHub, where it has earned 196 stars from the community.

Add analytics charts and information directly in your Payload admin. Maintained by NouanceLabs on GitHub, where it has earned 183 stars from the community.

This repository contains a set of powerful plugins designed to enhance your Payload CMS projects. Whether you're managing complex content structures or optimizing the authoring experience, these plugins will help streamline your workflow. Maintained by shefing on GitHub, where it has earned 180 stars from the community.

Google Chrome - File System Access API - vulnerabilities reported by Maciej Pulikowski | Total Bug Bounty Reward: $5.000 | CVE-2021-21123 and 5 more. Maintained by Puliczek on GitHub, where it has earned 175 stars from the community.

Educational lab project exploring secure remote session design, authentication flows, logging, and detection considerations. Built for defensive research and blue-team understanding. Maintained by safesploit on GitHub, where it has earned 175 stars from the community.

CVE、POC、CNVD++FUZZ,,. Maintained by wjl110 on GitHub, where it has earned 174 stars from the community.

E-commerce platform template using PayloadCMS, Next.js, TypeScript and TailwindCSS for modern online stores. Includes payment and delivery integrations. Maintained by Mandala-Software-House on GitHub, where it has earned 172 stars from the community.

This script allows you to inject an invisible keylogger thanks to a Bad USB. Maintained by tuconnaisyouknow on GitHub, where it has earned 163 stars from the community.

Add an extra security layer to PayloadCMS using a Time-based One-time Password (TOTP). Maintained by GeorgeHulpoi on GitHub, where it has earned 157 stars from the community.

This repository contains writeups for various CTFs I've participated in (Including Hack The Box). Maintained by evyatar9 on GitHub, where it has earned 155 stars from the community.

Arcane is a simple script designed to backdoor iOS packages (iphone-arm) and create the necessary resources for APT repositories. Maintained by tokyoneon on GitHub, where it has earned 155 stars from the community.

PenTest Education: R-U-DEAD-YET? DOS Attack Implementation in Node.JS. Maintained by sahilchaddha on GitHub, where it has earned 151 stars from the community.

SMB Relay Attack Script. Maintained by Jsitech on GitHub, where it has earned 146 stars from the community.

DuckyScript language to DigiSpark payload converter (Online / C++). Maintained by CedArctic on GitHub, where it has earned 145 stars from the community.

Payload Skills to assist AI agents. Maintained by payloadcms on GitHub, where it has earned 145 stars from the community.

Monorepo template with Remix and Payload. Maintained by payloadcms on GitHub, where it has earned 134 stars from the community.

Payload encoding utility to effectively lower payload entropy. Maintained by NVISOsecurity on GitHub, where it has earned 130 stars from the community.

Legacy OpenSource malware packer for.NET Framework executable files. Maintained by DosX-dev on GitHub, where it has earned 130 stars from the community.

This project aims to provide a comprehensive resource for understanding and testing Cross-Site Scripting (XSS) vulnerabilities, one of the OWASP Top 10 security risks. It is designed to be a useful resource for security researchers, penetration testers, and developers. Maintained by payload-box on GitHub, where it has earned 130 stars from the community.

htk-lite is a lighter version of hackers-tool-kit but it still has the same hacking ability as hackers-tool-kit. Maintained by unkn0wnh4ckr on GitHub, where it has earned 127 stars from the community.

MalQR is a collection of malicious QR Codes and Barcodes you can use to test the security of your scanners. Maintained by MalQR on GitHub, where it has earned 127 stars from the community.

Cobalt Strike module x loader x profile x wike / A public collection of open resources for Cobalt Strike (only legal use in Red Team and penetration testing. Maintained by cfs0x on GitHub, where it has earned 125 stars from the community.

A Payload CMS plugin for OpenAPI (3.0, 3.1) specification generation. Maintained by janbuchar on GitHub, where it has earned 122 stars from the community.

SQL Injection Payload List. Maintained by omurugur on GitHub, where it has earned 121 stars from the community.

Simple script for the WHID injector - a rubberducky wifi. Maintained by swisskyrepo on GitHub, where it has earned 120 stars from the community.

PowerShell payload generator. Maintained by postrequest on GitHub, where it has earned 120 stars from the community.

Collection of script templates to create infinite UAC prompts forcing a user to run as admin. Maintained by chainski on GitHub, where it has earned 119 stars from the community.

Payload CMS MCP Server. Maintained by disruption-hub on GitHub, where it has earned 117 stars from the community.

A payload launcher made in javascript for the Nintendo Switch. Maintained by lordfriky on GitHub, where it has earned 116 stars from the community.

A production-ready PayloadCMS starter with Better Auth, modern UI components, and full-stack development tools. Maintained by fluid-design-io on GitHub, where it has earned 115 stars from the community.

Go-deliver is a payload delivery tool coded in Go. Maintained by 0x09AL on GitHub, where it has earned 114 stars from the community.

Add oAuth sign in to your Payload CMS site. Maintained by thgh on GitHub, where it has earned 113 stars from the community.

Collection of various bite-sized Payload v3 plugins and tools. Maintained by rilrom on GitHub, where it has earned 112 stars from the community.

Windows Hacking FrameWork using Reverse Shell. Maintained by canarddu38 on GitHub, where it has earned 111 stars from the community.

checksum-reproducible tar archives (utility/library). Maintained by vbatts on GitHub, where it has earned 110 stars from the community.

PoC - Remote Unauthenticated Code Execution Vulnerability in OpenSSH server (Scanner and Exploit). Maintained by l0n3m4n on GitHub, where it has earned 110 stars from the community.

A free chat platform that encrypts conversation information throughout the process to protect your security and privacy. No information is collected from you and no permissions are required from you.End of chat Clear all records. Maintained by peng-xiao-shuai on GitHub, where it has earned 110 stars from the community.

Modded Program for remote control of windows computers via telegram bot. Written in C#. Maintained by cisamu123 on GitHub, where it has earned 109 stars from the community.