# Payload 知识库（结构化）

- Web 攻击 payload: **177** 条 / 23 类
- 内网渗透 payload: **128** 条 / 11 类
- 工具命令速查: **114** 条 / 14 类
- WAF/EDR 绕过变体: **176** 条 → [waf-bypass.md](waf-bypass.md)

## Web 攻击分类

| 类别 | 数量 | 文件 |
|------|----:|------|
| 框架漏洞 | 18 | [by-category/web/框架漏洞.md](by-category/web/框架漏洞.md) |
| SQL/NoSQL注入 | 17 | [by-category/web/sql-nosql注入.md](by-category/web/sql-nosql注入.md) |
| API安全 | 12 | [by-category/web/api安全.md](by-category/web/api安全.md) |
| LFI/RFI文件包含 | 12 | [by-category/web/lfi-rfi文件包含.md](by-category/web/lfi-rfi文件包含.md) |
| RCE远程代码执行 | 12 | [by-category/web/rce远程代码执行.md](by-category/web/rce远程代码执行.md) |
| SSRF服务端请求伪造 | 12 | [by-category/web/ssrf服务端请求伪造.md](by-category/web/ssrf服务端请求伪造.md) |
| XSS跨站脚本 | 12 | [by-category/web/xss跨站脚本.md](by-category/web/xss跨站脚本.md) |
| SSTI模板注入 | 10 | [by-category/web/ssti模板注入.md](by-category/web/ssti模板注入.md) |
| 认证漏洞 | 10 | [by-category/web/认证漏洞.md](by-category/web/认证漏洞.md) |
| XXE实体注入 | 9 | [by-category/web/xxe实体注入.md](by-category/web/xxe实体注入.md) |
| CSRF跨站请求伪造 | 8 | [by-category/web/csrf跨站请求伪造.md](by-category/web/csrf跨站请求伪造.md) |
| 文件漏洞 | 7 | [by-category/web/文件漏洞.md](by-category/web/文件漏洞.md) |
| 业务逻辑漏洞 | 5 | [by-category/web/业务逻辑漏洞.md](by-category/web/业务逻辑漏洞.md) |
| AI安全 | 4 | [by-category/web/ai安全.md](by-category/web/ai安全.md) |
| JWT安全 | 4 | [by-category/web/jwt安全.md](by-category/web/jwt安全.md) |
| 云安全漏洞 | 4 | [by-category/web/云安全漏洞.md](by-category/web/云安全漏洞.md) |
| 请求走私 | 4 | [by-category/web/请求走私.md](by-category/web/请求走私.md) |
| WebSocket安全 | 3 | [by-category/web/websocket安全.md](by-category/web/websocket安全.md) |
| 供应链攻击 | 3 | [by-category/web/供应链攻击.md](by-category/web/供应链攻击.md) |
| 原型链污染 | 3 | [by-category/web/原型链污染.md](by-category/web/原型链污染.md) |
| 开放重定向 | 3 | [by-category/web/开放重定向.md](by-category/web/开放重定向.md) |
| 缓存与CDN安全 | 3 | [by-category/web/缓存与cdn安全.md](by-category/web/缓存与cdn安全.md) |
| 点击劫持 | 2 | [by-category/web/点击劫持.md](by-category/web/点击劫持.md) |

## 内网渗透分类

| 类别 | 数量 | 文件 |
|------|----:|------|
| 凭证窃取 | 20 | [by-category/intranet/凭证窃取.md](by-category/intranet/凭证窃取.md) |
| 横向移动 | 16 | [by-category/intranet/横向移动.md](by-category/intranet/横向移动.md) |
| 权限提升 | 15 | [by-category/intranet/权限提升.md](by-category/intranet/权限提升.md) |
| 免杀与规避 | 14 | [by-category/intranet/免杀与规避.md](by-category/intranet/免杀与规避.md) |
| 域渗透攻击 | 14 | [by-category/intranet/域渗透攻击.md](by-category/intranet/域渗透攻击.md) |
| 隧道代理 | 13 | [by-category/intranet/隧道代理.md](by-category/intranet/隧道代理.md) |
| 信息收集 | 12 | [by-category/intranet/信息收集.md](by-category/intranet/信息收集.md) |
| 权限维持 | 12 | [by-category/intranet/权限维持.md](by-category/intranet/权限维持.md) |
| ADCS攻击 | 5 | [by-category/intranet/adcs攻击.md](by-category/intranet/adcs攻击.md) |
| Exchange攻击 | 5 | [by-category/intranet/exchange攻击.md](by-category/intranet/exchange攻击.md) |
| SharePoint攻击 | 2 | [by-category/intranet/sharepoint攻击.md](by-category/intranet/sharepoint攻击.md) |

## 工具命令

| 类别 | 数量 | 文件 |
|------|----:|------|
| 信息收集 | 20 | [tools/信息收集.md](tools/信息收集.md) |
| 内网渗透 | 19 | [tools/内网渗透.md](tools/内网渗透.md) |
| Web渗透 | 16 | [tools/web渗透.md](tools/web渗透.md) |
| 反弹Shell | 12 | [tools/反弹shell.md](tools/反弹shell.md) |
| 密码攻击 | 11 | [tools/密码攻击.md](tools/密码攻击.md) |
| 漏洞利用 | 11 | [tools/漏洞利用.md](tools/漏洞利用.md) |
| 系统命令 | 8 | [tools/系统命令.md](tools/系统命令.md) |
| 编码解码 | 6 | [tools/编码解码.md](tools/编码解码.md) |
| 凭证窃取 | 3 | [tools/凭证窃取.md](tools/凭证窃取.md) |
| 权限提升 | 3 | [tools/权限提升.md](tools/权限提升.md) |
| 隧道代理 | 2 | [tools/隧道代理.md](tools/隧道代理.md) |
| Windows渗透 | 1 | [tools/windows渗透.md](tools/windows渗透.md) |
| 域渗透 | 1 | [tools/域渗透.md](tools/域渗透.md) |
| 红队工具 | 1 | [tools/红队工具.md](tools/红队工具.md) |
