swisskyrepo/PayloadsAllTheThings

A list of useful payloads and bypass for Web Application Security and Pentest/CTF

81.8k stars · 17.5k forks · Python

Healthy

Healthy: maintained by 3 people in the last 90 days, no known risks.

Why

No rule fired.

What would change this

Maintenance

Complete

Slowing

Human commits, 30 days
0
Human commits, 90 days
9
Human commits, 365 days
80
Bot share of commits, 365 days
0%
Last commit
Aug 27, 2026 (1 month ago)
Last human commit
Aug 27, 2026 (1 month ago)
Authors, 90 days
3
Last release
Jul 26, 2025 (1 year ago)
Median PR merge time
18 hours

Too few recent issues to measure responsiveness.

Sources: Commits, Releases, Merged pull requests, Issues

People

Complete
Owner
Personal account
Commits sampled
80 since Oct 14, 2025
Authors for half of commits
1
Authors for 80% of commits
3
Contributors
292

Top committers

Sources: Commits, Contributors

Stars

Complete

Mostly organic, confidence high

Stars per week, 2016-10-16 to 2026-10-11. 42 weeks overlap a burst.Peak 1.3k a week2016-10-162026-10-11
Bars show stars gained each week. Orange bars overlap a burst.

Bursts

Anyone can buy stars for any repo; bursts alone don't prove the owner did.

Sources: How star history is analyzed

Risk

Complete

Flags

No risk flags.

License

Now
MIT (OSI-approved)
A year ago
MIT (OSI-approved)

Packages

No published packages found.

OpenSSF Scorecard: 4.1 out of 10 (via deps.dev).

Sources: GitHub: swisskyrepo/PayloadsAllTheThings

Badge

Add this to a README to show the current verdict:

[![RepoRadar](https://reporadar.ai/swisskyrepo/PayloadsAllTheThings/badge.svg)](https://reporadar.ai/swisskyrepo/PayloadsAllTheThings)

Earlier verdicts

Computed 19 hours ago · method 2026.10.2