<?xml version="1.0" encoding="UTF-8"?>
<urlset xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://www.sitemaps.org/schemas/sitemap/0.9 http://www.sitemaps.org/schemas/sitemap/0.9/sitemap.xsd" xmlns="http://www.sitemaps.org/schemas/sitemap/0.9">
<url>
<loc>https://payloadsallthethings.web.app/Latex-Injection/</loc>
<lastmod>2019-03-07T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Download-and-Execute/</loc>
<lastmod>2019-03-07T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Post-Exploitation-Koadic/</loc>
<lastmod>2019-03-07T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/OAuth/</loc>
<lastmod>2019-05-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Subdomains-Enumeration/</loc>
<lastmod>2019-09-27T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/CSRF-Injection/</loc>
<lastmod>2019-12-17T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XSLT-Injection/</loc>
<lastmod>2019-12-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Race-Condition/</loc>
<lastmod>2020-01-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Miscellaneous-Tricks/</loc>
<lastmod>2020-03-16T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Web-Socket/</loc>
<lastmod>2020-04-11T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/JSON-Web-Token/</loc>
<lastmod>2020-04-17T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Insecure-Direct-Object-References/</loc>
<lastmod>2020-04-22T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/SAML-Injection/</loc>
<lastmod>2020-05-12T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Cloud-Azure-Pentest/</loc>
<lastmod>2020-05-16T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/NoSQL-Injection/</loc>
<lastmod>2020-05-24T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XPATH-Injection/</loc>
<lastmod>2020-05-24T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/LDAP-Injection/</loc>
<lastmod>2020-09-09T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Linux-Persistence/</loc>
<lastmod>2020-09-23T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Cassandra-Injection/</loc>
<lastmod>2020-10-09T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Directory-Traversal/</loc>
<lastmod>2020-10-09T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Metasploit-Cheatsheet/</loc>
<lastmod>2020-10-16T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Network-Discovery/</loc>
<lastmod>2020-10-18T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Web-Cache-Deception/</loc>
<lastmod>2020-10-18T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/CRLF-Injection/</loc>
<lastmod>2020-10-25T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Insecure-Management-Interface/</loc>
<lastmod>2020-10-28T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/MySQL-Injection/</loc>
<lastmod>2020-10-29T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/SQLite-Injection/</loc>
<lastmod>2020-11-18T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Open-Redirect/</loc>
<lastmod>2020-11-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Type-Juggling/</loc>
<lastmod>2020-12-08T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/File-Inclusion/</loc>
<lastmod>2020-12-12T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/CORS-Misconfiguration/</loc>
<lastmod>2020-12-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/CVE-Exploits/</loc>
<lastmod>2020-12-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Container-Docker-Pentest/</loc>
<lastmod>2020-12-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Methodology-and-enumeration/</loc>
<lastmod>2020-12-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Tabnabbing/</loc>
<lastmod>2020-12-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Network-Pivoting-Techniques/</loc>
<lastmod>2020-12-17T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/AWS-Amazon-Bucket-S3/</loc>
<lastmod>2020-12-18T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Insecure-Deserialization/</loc>
<lastmod>2020-12-18T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/HTTP-Parameter-Pollution/</loc>
<lastmod>2020-12-23T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Persistence/</loc>
<lastmod>2021-01-09T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Escape-Breakout/</loc>
<lastmod>2021-01-13T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Request-Smuggling/</loc>
<lastmod>2021-01-17T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Kubernetes/</loc>
<lastmod>2021-01-20T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/API-Key-Leaks/</loc>
<lastmod>2021-01-25T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Cobalt-Strike-Cheatsheet/</loc>
<lastmod>2021-01-30T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Insecure-Source-Code-Management/</loc>
<lastmod>2021-02-03T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Account-Takeover/</loc>
<lastmod>2021-02-22T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/CSV-Injection/</loc>
<lastmod>2021-03-17T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Server-side-Request-Forgery/</loc>
<lastmod>2021-03-24T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/MSSQL-Server-Cheatsheet/</loc>
<lastmod>2021-03-25T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-AMSI-Bypass/</loc>
<lastmod>2021-03-25T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/MSSQL-Injection/</loc>
<lastmod>2021-03-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/SQL-Injection/</loc>
<lastmod>2021-03-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Upload-Insecure-Files/</loc>
<lastmod>2021-03-30T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Linux-Privilege-Escalation/</loc>
<lastmod>2021-04-15T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/GraphQL-Injection/</loc>
<lastmod>2021-04-22T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Office-Attacks/</loc>
<lastmod>2021-04-22T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XXE-Injection/</loc>
<lastmod>2021-04-25T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Reverse-Shell-Cheatsheet/</loc>
<lastmod>2021-04-26T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Cloud-AWS-Pentest/</loc>
<lastmod>2021-05-01T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Active-Directory-Attacks/</loc>
<lastmod>2021-05-06T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Mimikatz/</loc>
<lastmod>2021-05-06T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Privilege-Escalation/</loc>
<lastmod>2021-05-06T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Windows-Using-credentials/</loc>
<lastmod>2021-05-06T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/README/</loc>
<lastmod>2021-05-06T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Bind-Shell-Cheatsheet/</loc>
<lastmod>2021-05-07T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/Command-Injection/</loc>
<lastmod>2021-05-09T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/HQL-Injection/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/OracleSQL-Injection/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/PostgreSQL-Injection/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XSS-in-Angular/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XSS-with-Relative-Path-Overwrite/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/XSS-Injection/</loc>
<lastmod>2022-01-10T00:00:00+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/</loc>
<lastmod>2022-01-10T21:07:21+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/</loc>
<lastmod>2022-01-10T21:07:21+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/archives/</loc>
<lastmod>2022-01-10T21:07:21+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/about/</loc>
<lastmod>2022-01-10T21:07:21+07:00</lastmod>
</url>
<url>
<loc>https://payloadsallthethings.web.app/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/injection/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/latex/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/xss/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/windows/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/server/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/webdav/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/network/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/javascript/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/pentest/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/token/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/subdomain/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/csrf/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/html/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/xslt/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/exploits/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/burpsuite/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/python/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/tips-triks/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/jwt/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/saml/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/sso/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/markup/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/azure/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/cloud/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/database/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/nosql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/xpath/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/attack/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/xml/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/ldap/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/proxy/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/linux/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/sql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/apache/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/metasploit/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/nmap/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/mysql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/bug-hunting/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/shell/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/exploit/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/bypass/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/mssql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/form/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/post/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/attacks/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/office/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/cheatsheet/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/aws/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/mimikatz/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/security/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/tags/vuln/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/injection/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/methodology-and-resource/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/windows/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/attack/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/server/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/attacks/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/security/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/cloud/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/database/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/nosql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/webapp/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/linux/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/cassandra/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/metasploit/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/network/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/mysql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/sqlite/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/docker/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/cheatsheet/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/mssql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/sql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/files/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/graphql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/readme/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/postgresql/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/categories/xss/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page2/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page3/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page4/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page5/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page6/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page7/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page8/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page9/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page10/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page11/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page12/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page13/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page14/</loc>
</url>
<url>
<loc>https://payloadsallthethings.web.app/page15/</loc>
</url>
</urlset>
