A list of useful payloads and bypass for Web Application Security and Pentest/CTF

Thefatrat a massive exploiting tool : Easy tool to generate backdoor and easy tool to post exploitation attack like browser attack,dll . This tool compiles a malware with popular payload and then the compiled malware can be execute on windows, android, mac . The malware that created with this tool also have an ability to bypass most AV software protection .

Curated list of Unix binaries that can be exploited to bypass system security restrictions

Bypass Paywalls for Chrome

Detect and bypass web application firewalls and protection systems

Bypass Paywalls for Firefox

Undetectable Windows Payload Generation

Miscellaneous exploit code

The goal of this repository is to document the most common techniques to bypass AppLocker.

Loader, dropper generator with multiple features for bypassing client-side and network-side countermeasures.

Penetration tests cases, resources and guidelines.

Image Captcha Solving Using TensorFlow and CNN Model. Accuracy 90%+

discontinued

Bypassing disabled exec functions in PHP (c) CRLF

A Burp Suite extension to help pentesters to bypass WAFs or test their effectiveness using a number of techniques

A big list of Android Hackerone disclosed reports and other resources.

An Python Script For Generating Payloads that Bypasses All Antivirus so far .

CloudBunny is a tool to capture the real IP of the server that uses a WAF as a proxy or protection. In this tool we used three search engines to search domain information: Shodan, Censys and Zoomeye.

Antivirus evasion project

Disable SSL verification and pinning on Android, system-wide

Authenticate against a MySQL server without knowing the cleartext password

Bypassing SSL Pinning in Instagram Android App

Bypassing WAF by abusing SSL/TLS Ciphers

Repackaging of Bypass with additional features

Bypassing SSL Pinning in Facebook Android App

Silentbridge is a toolkit for bypassing 802.1x-2010 and 802.1x-2004.

An automated Wireless RogueAP MITM attack framework.

Bypass for PowerShell Constrained Language Mode

UAC bypass techniques implemented and written in Go

Cloudflare real IP tracker.