mohdhaji87

mohdhaji87/payloadsallthethings-skills

Plugin Claude Code

Plugin marketplace listing 1 plugin: payloadsallthethings.

mohdhaji87/payloadsallthethings-skills

Instructions file

Claude Code instructions for mohdhaji87/payloadsallthethings-skills, covering payloadsallthethings skills - claude code instructions, plugin overview, how to use skills, direct skill invocation and contextual assistance.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Account takeover techniques via password reset poisoning, OAuth flaws, and session manipulation. Use for auth testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Detect and validate leaked API keys, tokens, and credentials. Use when finding exposed secrets in code, logs, or repositories.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Brute force and rate limit bypass techniques for authentication testing. Use when testing login security.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Business logic vulnerability testing - price manipulation, workflow bypass, privilege escalation. Use for logic flaw hunting.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Clickjacking and UI redressing attacks with frame busting bypass. Use when testing X-Frame-Options.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Client-side path traversal techniques for browser-based file access. Use for client-side security testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

OS command injection with space bypass, filter evasion, blind detection. Use when testing system command execution.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

CORS misconfiguration exploitation - origin reflection, null origin, regex bypass. Use when testing cross-origin policies.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

CRLF injection for header manipulation, response splitting, and session fixation. Use for HTTP header testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Cross-Site Request Forgery exploitation with token bypass and SameSite cookie evasion. Use for CSRF testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

CSV/spreadsheet injection with formula payloads for Excel, Google Sheets. Use when testing export functionality.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Common CVE exploitation techniques and known vulnerability payloads. Use for known vulnerability testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Dependency confusion and supply chain attacks via package managers. Use for supply chain security testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Insecure deserialization for Java, PHP, Python, .NET, Ruby with gadget chains. Use for serialization testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

DNS rebinding attacks for same-origin policy bypass. Use when testing internal service access.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

DOM clobbering techniques for JavaScript variable overwriting via HTML injection. Use for DOM security testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Denial of Service techniques - ReDoS, resource exhaustion, algorithmic complexity. Use for availability testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Encoding transformation techniques - URL, Unicode, Base64 for filter bypass. Use for WAF evasion.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

External variable modification and parameter tampering techniques. Use for input validation testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

File upload bypass - extension, content-type, magic bytes, polyglot files. Use for upload security testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

GraphQL injection, introspection abuse, batching attacks, and authorization bypass. Use for GraphQL API testing.

mohdhaji87/payloadsallthethings-skills

Skill Claude CodeCodex

Google Web Toolkit security testing and deserialization attacks. Use when testing GWT applications.