awesome-repositories.com
Blog
MCP
awesome-repositories.com

Discover the best open-source repositories with AI-powered search.

ExploreCurated searchesOpen-source alternativesSelf-hosted softwareBlogSitemap
ProjectMCP serverAboutHow we rankPress
LegalPrivacyTerms
© 2026 Bringes Technology SRL·VAT RO45896025·hello@awesome-repositories.com
Back to payloadbox/command-injection-payload-list

Projects sharing features with Command Injection Payload List

23 open-source projects similar to payloadbox/command-injection-payload-list, ranked by shared indexed features. Tags may describe platforms or build tools rather than the same primary purpose. Check each project’s use case, license, and deployment requirements before treating it as a replacement.

  • swisskyrepo/payloadsallthethingsswisskyrepo avatar

    swisskyrepo/PayloadsAllTheThings

    82,465View on GitHub↗

    This project is a comprehensive, community-sourced knowledge base designed for security professionals and researchers. It functions as a centralized repository of offensive security techniques, providing a structured collection of exploit payloads, attack vectors, and methodologies for conducting vulnerability assessments and penetration testing. The repository distinguishes itself through a cross-platform payload taxonomy that categorizes exploitation methods by vulnerability type and target environment, enabling rapid lookup during security assessments. It maintains high standards of data i

    Pythonbountybugbountybypass
    View on GitHub↗82,465
  • owasp-modsecurity/modsecurityowasp-modsecurity avatar

    owasp-modsecurity/ModSecurity

    9,680View on GitHub↗

    ModSecurity is an open-source web application firewall and security engine. It functions as an HTTP traffic inspector and intrusion detection system that filters incoming web requests and responses against a set of security rules to block threats and prevent attacks on web servers. The project provides a modular framework for implementing restrictive security policies and custom filtering logic. It identifies and blocks common injection attacks, such as cross-site scripting and SQL injection, while hardening web applications to reduce their overall attack surface. Its broader capabilities in

    C++apacheapache2modsecurity
    View on GitHub↗9,680
  • edoverflow/bugbounty-cheatsheetEdOverflow avatar

    EdOverflow/bugbounty-cheatsheet

    6,580View on GitHub↗

    This project is a bug bounty resource directory, vulnerability research cheatsheet, and web security payload library. It serves as a centralized collection of curated payloads and common attack vectors used to identify security vulnerabilities in web applications. The repository provides a directory of platforms, books, and tools to support vulnerability discovery skills. It includes a reference for tested payloads and techniques used to trigger bugs and identify vulnerabilities during security audits. The content covers web application pentesting, security vulnerability testing, and general

    View on GitHub↗6,580

AI search

Explore more awesome repositories

Describe what you need in plain English — the AI ranks thousands of curated open-source projects by relevance.

Find more with AI search
  • owasp/go-scpO

    OWASP/Go-SCP

    5,285View on GitHub↗

    Go-SCP is a secure coding guide and vulnerability prevention framework for the Go programming language. It serves as a technical manual for implementing defensive programming patterns and security benchmarks to prevent common software vulnerabilities. The project functions as a static security reference, mapping known software weaknesses to specific Go remediation patterns. It provides a curated repository of secure coding standards and vetted implementation practices specifically focused on web application security. The framework covers security auditing by comparing source code against est

    Go
    View on GitHub↗5,285
  • jakejarvis/awesome-shodan-queriesjakejarvis avatar

    jakejarvis/awesome-shodan-queries

    7,839View on GitHub↗
    awesomeawesome-listcloud
    View on GitHub↗7,839
  • jgillam/burp-co2JGillam avatar

    JGillam/burp-co2

    153View on GitHub↗

    A collection of enhancements for Portswigger's popular Burp Suite web penetration testing tool.

    Java
    View on GitHub↗153
  • juliocesarfort/public-pentesting-reportsjuliocesarfort avatar

    juliocesarfort/public-pentesting-reports

    9,807View on GitHub↗

    A list of public penetration test reports published by several consulting firms and academic security groups.

    HTML
    View on GitHub↗9,807
  • laconicwolf/burp-extensionslaconicwolf avatar

    laconicwolf/burp-extensions

    142View on GitHub↗

    A collection of scripts to extend Burp Suite

    Python
    View on GitHub↗142
  • lucacapacci/sqlmapdnscollaboratorlucacapacci avatar

    lucacapacci/SqlmapDnsCollaborator

    12View on GitHub↗

    Burp Extension that lets you use Burp Collaborator as a DNS server for exfiltrating data via Sqlmap

    Java
    View on GitHub↗12
  • matrix/burp-nosqliscannermatrix avatar

    matrix/Burp-NoSQLiScanner

    29View on GitHub↗

    This extension provides a way to discover NoSQL injection vulnerabilities.

    Java
    View on GitHub↗29
  • owasp/cheatsheetseriesOWASP avatar

    OWASP/CheatSheetSeries

    33,935View on GitHub↗

    The OWASP Cheat Sheet Series is a comprehensive, community-driven repository of concise security best practices and defensive coding patterns. It serves as a centralized knowledge base for developers and security professionals, providing actionable guidance to secure applications across the entire software development lifecycle. The project covers a vast array of security domains, ranging from fundamental web application hardening and authentication protocols to specialized controls for modern infrastructure and artificial intelligence systems. What distinguishes this project is its decentral

    JavaScriptapplication-securityappsecbest-practices
    View on GitHub↗33,935
  • owasp/owasp-mstgOWASP avatar

    OWASP/owasp-mstg

    12,973View on GitHub↗

    The Mobile Application Security Testing Guide is a comprehensive manual and compliance framework for verifying the security of mobile applications. It provides a standardized reference for identifying and validating common software security weaknesses and performing reverse engineering based on industry standards. The project provides a structured set of technical processes and checklists used to audit applications against established security weakness enumerations. It encompasses guidance for analyzing application binaries and runtime behavior to identify hidden functionality and security ga

    Python
    View on GitHub↗12,973
  • payloadbox/sql-injection-payload-listP

    payloadbox/sql-injection-payload-list

    0View on GitHub↗
    View on GitHub↗0
  • ruby/rubyruby avatar

    ruby/ruby

    23,800View on GitHub↗

    Ruby is a general-purpose, dynamic programming language built on an object-oriented runtime environment. It treats every piece of data as an object, ensuring a consistent interface for manipulation across the entire system. The language is designed to support programmer productivity through a focus on natural syntax and flexible metaprogramming capabilities. The runtime distinguishes itself through a pure object model that allows for dynamic class modification and runtime method definition. It supports functional programming patterns by encapsulating code blocks as objects that capture their

    Rubycjitlanguage
    View on GitHub↗23,800
  • s0md3v/awesomexsss0md3v avatar

    s0md3v/AwesomeXSS

    5,058View on GitHub↗
    JavaScriptpayloadpayload-listxss
    View on GitHub↗5,058
  • securitum/researchsecuritum avatar

    securitum/research

    151View on GitHub↗

    research

    JavaScript
    View on GitHub↗151
  • streaak/keyhacksstreaak avatar

    streaak/keyhacks

    6,069View on GitHub↗

    Keyhacks is a command-line tool that tests whether API keys and tokens for dozens of cloud services are valid and active. It automates the verification of discovered credentials during security auditing and penetration testing, confirming if leaked or harvested API keys, tokens, and secrets are still operational. The tool validates credentials by sending lightweight, service-specific HTTP requests to each platform's API endpoint and inspecting the response status or body. Each validation runs independently without storing state between requests, using pre-defined request templates with the co

    View on GitHub↗6,069
  • virusdefender/burptimevirusdefender avatar

    virusdefender/burptime

    11View on GitHub↗

    Burp Show Response Time

    Java
    View on GitHub↗11
  • attackercan/burp-xss-sql-pluginattackercan avatar

    attackercan/burp-xss-sql-plugin

    44View on GitHub↗

    Publishing plugin which I used for years which helped me to find several bugbounty-worthy XSSes, OpenRedirects and SQLi.

    Python
    View on GitHub↗44
  • xer0days/sqli-query-tamperingxer0days avatar

    xer0days/SQLi-Query-Tampering

    157View on GitHub↗

    SQLi Query Tampering extends and adds custom Payload Generator/Processor in Burp Suite's Intruder. This extension gives you the flexibility of manual testing with many powerful evasion techniques.

    Python
    View on GitHub↗157
  • codewatchorg/sqlipycodewatchorg avatar

    codewatchorg/sqlipy

    261View on GitHub↗

    SQLiPy is a Python plugin for Burp Suite that integrates SQLMap using the SQLMap API.

    Python
    View on GitHub↗261
  • djadmin/awesome-bug-bountydjadmin avatar

    djadmin/awesome-bug-bounty

    5,971View on GitHub↗

    A comprehensive curated list of available Bug Bounty & Disclosure Programs and Write-ups.

    View on GitHub↗5,971
  • enaqx/awesome-pentestenaqx avatar

    enaqx/awesome-pentest

    26,410View on GitHub↗

    A collection of awesome penetration testing resources, tools and other shiny things

    awesomeawesome-list
    View on GitHub↗26,410