What problem does it solve? Security testers waste time recalling or reconstructing correct payload syntax for each vulnerability class, and risk submitting findings that bug bounty programs always reject, hurting their validity ratio. ## Core Features & Use Cases - Payload Library by Vulnerability Class: Ready-to-use payloads for XSS, SSRF, SQLi, XXE, NoSQLi, command injection, SSTI, IDOR, path traversal, HTTP smuggling, WebSocket attacks, MFA bypass, and SAML attacks, each with detection, exploitation, and WAF-bypass variants. - Submission Decision Tables: An always-rejected list (e.g., missing security headers, self-XSS, clickjacking without PoC) and a conditionally-valid table showing which chains turn weak findings into reportable ones. - Recon Integration: gf pattern names, wordlist references, and built-in paths for fuzzing map recon output directly to the right payload section. - Use Case: During an authorized engagement, you find a URL parameter classified by gf ssrf; open the SSRF section to get cloud metadata endpoints, IP bypass encodings, and redirect-chain techniques, then confirm with an OOB callback before reporting. ## Quick Start Ask the assistant to load the security-arsenal skill and give you SSRF payloads and bypass techniques for testing a URL-fetching parameter on an authorized target.
