security-arsenal

The library supplies web security payloads and bypass techniques across XSS, SSRF, SQLi, XXE, and SSTI scenarios. It includes pattern name mappings and submission guardrails to determine if findings are submittable in authorized engagements.

SQLi and NoSQLi WAF filter bypass is supported through reference tables containing bypass patterns and alternative payloads. The library maps gf pattern names to support reconnaissance and payload matching during authorized testing.

HTTP request smuggling and WebSocket testing are supported with dedicated payload libraries. The skill covers these alongside MFA bypass, IDOR, and path traversal scenarios, providing submission rules to determine practical impact.

Submission guardrules provide rules for determining if vulnerability findings are submittable in authorized engagements. They combine payload validation results with chain-logic guidance to assess practical impact and exploitability.

Chain payloads using chain-logic guidance and templates that combine individual payloads with bypass techniques. This validates end-to-end exploitability across XSS, SSRF, SQLi, and other web vulnerability scenarios in authorized engagements.

gf pattern name mappings and wordlists are included to support reconnaissance and payload matching during web security testing. These map to vulnerability classes like XSS, SSRF, SQLi, and path traversal for efficient target analysis.