A list of useful payloads and bypass for Web Application Security and Pentest/CTF
Python
Updated Jun 11, 2019
Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like b…
Java
Updated Jun 1, 2019
Curated list of Unix binaries that can be exploited to bypass system security restrictions
HTML
Updated Apr 16, 2019
Detect and bypass web application firewalls and protection systems
Python
Updated May 21, 2019
Undetectable Windows Payload Generation
Python
Updated Mar 22, 2019
Miscellaneous exploit code
Python
Updated Feb 11, 2019
Bypass Paywalls for Chrome
JavaScript
Updated Jun 5, 2019
The goal of this repository is to document the most common techniques to bypass AppLocker.
PowerShell
Updated Jun 3, 2019
Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.
Python
Updated May 8, 2019
Bypass Paywalls for Firefox
JavaScript
Updated Jun 7, 2019
Penetration tests cases, resources and guidelines.
Updated May 22, 2019
Image Captcha Solving Using TensorFlow and CNN Model. Accuracy 90%+
Python
Updated Feb 21, 2019
discontinued
Ruby
Updated Mar 9, 2019
Bypassing disabled exec functions in PHP (c) CRLF
PHP
Updated Nov 26, 2018
A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques
Java
Updated May 4, 2019
A big list of Android Hackerone disclosed reports and other resources.
Updated Nov 29, 2018
CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we u…
Python
Updated Nov 19, 2018
An Python Script For Generating Payloads that Bypasses All Antivirus so far .
Python
Updated Jun 20, 2018
Authenticate against a MySQL server without knowing the cleartext password
C
Updated Mar 18, 2017
Disable SSL verification and pinning on Android, system-wide
Java
Updated Mar 11, 2019
Antivirus evasion project
C#
Updated May 22, 2019
Bypassing SSL Pinning in Instagram Android App
Updated May 8, 2018
Bypassing WAF by abusing SSL/TLS Ciphers
Python
Updated Apr 18, 2019
Repackaging of Bypass with additional features
Java
Updated Mar 24, 2017
Bypassing SSL Pinning in Facebook Android App
Updated Jun 7, 2018
An automated Wireless RogueAP MITM attack framework.
Shell
Updated May 9, 2019
Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.
C
Updated Aug 5, 2018
UAC bypass techniques implemented and written in Go
Go
Updated Apr 25, 2019
Bypass for PowerShell Constrained Language Mode
C#
Updated Mar 28, 2019
Node.js package to bypass CloudFlare's anti-bot JavaScript challenges
JavaScript
Updated Nov 2, 2018
