A list of useful payloads and bypass for Web Application Security and Pentest/CTF
COMMITS
April 22, 2026
S
Update reference date, fix format
Swissky committed
S
Normalize commands, callbacks and references
Swissky committed
S
S
L
docs: normalize dependency confusion reference dates
lwlzxxz committed
L
docs: sanitize CSV injection examples and normalize references
lwlzxxz committed
April 18, 2026
S
GraphQL update
Swissky committed
April 8, 2026
S
PTH Web Archive
Swissky committed
S
Python Path File
Swissky committed
March 16, 2026
S
Merge pull request #824 from noraj/patch-2
Swissky committed
A
XXE zip recompression tips
Alexandre ZANNI committed
March 9, 2026
S
Archive external reference links via Wayback Machine
Swissky committed
March 4, 2026
S
SQLi Auth Bypass fix example
Swissky committed
March 2, 2026
S
Fix title error
Swissky committed
S
Fix markdown linter
Swissky committed
S
Merge pull request #820 from vladko312/master
Swissky committed
S
Fix CI/CD markdown
Swissky committed
S
Fix formatting issues in SpEL section of Java.md
Swissky committed
S
Fix formatting for SpEL and OGNL examples in Java.md
Swissky committed
S
Change title to 'Elixir Deserialization' and update content
Swissky committed
S
Update Python.md to clarify payload compatibility
Swissky committed
February 15, 2026
S
CSS Injection
Swissky committed
February 2, 2026
S
Merge pull request #818 from HAK3R4LIFE/master
Swissky committed
S
Merge pull request #819 from ocnu/patch-typo-fix
Swissky committed
O
docs: fix typo in README
ocnu committed
February 1, 2026
S
Improve clarity in 2FA bypass documentation
SCPlayz7000 committed
January 21, 2026
S
Merge pull request #815 from pgoslatara/actup/update-actions-1768915364
Swissky committed
January 20, 2026
P
chore: Update outdated GitHub Actions versions
Padraic Slattery committed