Payload class · meta
PayloadsAllTheThings
The reference payload & bypass encyclopedia for nearly every web vuln class. Bookmark it, then come back here for quick probes.
Context first
Use as a detection primitive
The reference payload & bypass encyclopedia for nearly every web vuln class. Bookmark it, then come back here for quick probes.
Do not copy blind
Identify the parser, sink, encoding, and expected non-vulnerable behavior before choosing a sample. Prefer non-destructive markers.
Samples
Recorded payloads
This record is a source index and does not duplicate upstream payloads.
Source
Attribution
Version history: normalized permanent page created 2026-08-20.