skills.rest
xijunww
xijunwwCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

payload-research

Craft and analyze XSS, SQLi, SSTI, and command injection web vulnerability payloads.

1|Updated Jun 26, 2026
Search Tags:#XSS#vulnerability testing#command injection#payload crafting#SQLi#SSTI
One-click install
npx skills add https://github.com/xijunww/Pentest --skill payload-research
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: payload-research
Source: https://github.com/xijunww/Pentest/tree/main/packages/core/src/config/skills/builtin/payload-research
Command: npx skills add https://github.com/xijunww/Pentest --skill payload-research

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) components.

What problem does it solve?

This Skill assists in researching and crafting payloads to bypass security measures during vulnerability verification.

Core Features & Use Cases

  • Payload Crafting: Generate payloads for various types of vulnerabilities such as XSS, SQLi, SSTI, and command injection.
  • Research and Analysis: Provides detailed information on input point analysis, filter identification, encoding, and bypass techniques.
  • Use Case: Utilize this Skill to create a specific payload for an XSS vulnerability to verify its presence in a web application.

Quick Start

Use the payload-research skill to craft an XSS payload for a detected vulnerability in the 'target-app'.

Frequently Asked Questions about payload-research

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I craft payloads to bypass filters for XSS and SQLi vulnerabilities?▼

Crafting payloads to bypass XSS and SQLi filters requires analyzing input points and applying specific encoding techniques to generate effective injection strings for vulnerability verification.

What is the best way to verify SSTI vulnerabilities using targeted payloads?▼

The best way to verify SSTI vulnerabilities involves researching template injection payloads tailored to the target web application context to confirm remote code execution or data exposure.

Does this payload generation approach work for command injection testing?▼

Yes, this approach supports command injection testing by crafting specific payloads designed to bypass security measures and verify command execution vulnerabilities within web applications.

How do I identify the correct encoding technique for a payload that is not working?▼

When a payload is not working, you must identify the specific filtering mechanisms in place and apply corresponding encoding techniques to obfuscate the payload and achieve a successful bypass.

What knowledge is required to analyze input points for vulnerability testing?▼

Analyzing input points for vulnerability testing requires knowledge of web application contexts, specific filtering mechanisms, and various encoding techniques to effectively identify and exploit security weaknesses.

Can payload-research generate payloads for multiple vulnerability types simultaneously?▼

Yes, payload-research can generate and analyze payloads across multiple vulnerability types including XSS, SQLi, SSTI, and command injection to verify diverse security measures in web applications.

Related Skills

Explore More Software Engineering Skills→
ricardoo022ricardoo022

scan-fase-1

Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.

Community
Advanced
Kisilev13Kisilev13

hunt-sqli

Detect SQL injection vulnerabilities by analyzing tech stacks, error messages, and user inputs.

Community
Advanced
andrescardonas7andrescardonas7

burp-suite

Intercept and manipulate HTTP traffic to scan web applications for vulnerabilities.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced