🔐 Vault - Payloads Collection

🔐 Password & Authentication

• 10k-most-common-password.txt
• 4-digi-otp-combinations-modified-by-aman.txt
• 4-digits-0000-9999.txt
• 6_digit_mix.txt
• cirt-default-usernames.txt

🐞 Web Exploitation Payloads

• 12500-XSS-payloads.txt
• HTML5sec-Injections-Jhaddix.txt
• LFI-Jhaddix-payloads.txt
• SSI-Injection-Jhaddix.txt
• sql-payloads.txt
• command-injection.txt
• open-redirect-payloads.txt
• graphql.txt

🧭 Discovery & Enumeration

• combined_directories.txt
• raft-large-directories-lowercase.txt
• raft-large-files.txt
• subdomains-top1million-110000.txt
• subdomains-top1million-5000.txt
• endpoints-payloads.txt

📦 Miscellaneous

• master.txt
• hydra.restore
• senstivejs.txt
• common-payloads.txt
• Subdomain-Takeover.html

📚 Usage

Use these payloads with your favorite tools:

• ffuf
• Burp Suite
• sqlmap
• wfuzz
• dirsearch

✨ Credits

Inspired by the works of:

• Jhaddix
• SecLists
• HTML5 Security Cheat Sheets
• Community Contributions (and Aman 😉)