From redcap-payloads
Offensive-security payload library lookup. Use when the user needs an exploit payload for a specific vulnerability class — SQL injection (MySQL, MSSQL, PostgreSQL, OracleSQL, SQLite), cross-site scripting (reflected, stored, DOM, CSP bypass), server-side template injection, command injection, LDAP injection, XPATH injection, XXE, CSRF, CRLF, SSRF, deserialization, authentication bypass, WAF bypass, rate-limit bypass, or a CVE-specific exploit. Reads from a local clone of swisskyrepo/PayloadsAllTheThings organized as topic folders with a README.md and /Intruder/ wordlists per topic.
How this skill is triggered — by the user, by Claude, or both
Slash command
/redcap-payloads:redcap-payloadsThe summary Claude sees in its skill listing — used to decide when to auto-load this skill
Wraps a local clone of [swisskyrepo/PayloadsAllTheThings](https://github.com/swisskyrepo/PayloadsAllTheThings) with navigation and retrieval workflows. The corpus is ~140 topic folders covering every major web application vulnerability class, each with a README and wordlist files suitable for Burp Intruder or custom fuzzers.
Wraps a local clone of swisskyrepo/PayloadsAllTheThings with navigation and retrieval workflows. The corpus is ~140 topic folders covering every major web application vulnerability class, each with a README and wordlist files suitable for Burp Intruder or custom fuzzers.
The skill expects the fork cloned to:
~/Documents/GitHub/PayloadsAllTheThings
If the path is missing, prompt the user to clone:
cd ~/Documents/GitHub && gh repo clone GITDIDDY69/PayloadsAllTheThings
# or upstream:
# gh repo clone swisskyrepo/PayloadsAllTheThings
PayloadsAllTheThings/
├── SQL Injection/
│ ├── README.md ← vulnerability overview + payload index
│ ├── MySQL Injection.md ← DBMS-specific payloads
│ ├── MSSQL Injection.md
│ ├── PostgreSQL Injection.md
│ ├── OracleSQL Injection.md
│ ├── Intruder/ ← Burp Intruder wordlists (.txt)
│ │ ├── Generic_TimeBased.txt
│ │ └── FUZZDB_MySQL-WHERE_Time.txt
│ └── Files/ ← supplementary files
├── Cross-Site Scripting/
├── Server Side Template Injection/
├── Command Injection/
├── XXE Injection/
├── Insecure Deserialization/
├── Authentication/
├── CSRF Injection/
├── Upload Insecure Files/
├── Server Side Request Forgery/
├── LDAP Injection/
├── ... (~140 topics total)
└── Methodology and Resources/
Map the user's request to a topic folder. Common mappings:
| User intent | Topic folder |
|---|---|
| "SQLi / SQL injection" | SQL Injection |
| "XSS / cross-site scripting" | Cross-Site Scripting |
| "SSTI / template injection" | Server Side Template Injection |
| "XXE / XML injection" | XXE Injection |
| "command injection / RCE via shell" | Command Injection |
| "SSRF / request forgery" | Server Side Request Forgery |
| "auth bypass / login bypass" | Authentication |
| "CSRF / request forgery" | CSRF Injection |
| "insecure deserialization / gadget" | Insecure Deserialization |
| "file upload / unrestricted upload" | Upload Insecure Files |
| "LDAP injection / directory lookup bypass" | LDAP Injection |
| "open redirect" | Open Redirect |
| "race condition" | Race Condition |
| "prototype pollution" | Prototype Pollution |
When the class is unclear, list the top-level directories so the user can choose:
ls ~/Documents/GitHub/PayloadsAllTheThings | grep -v '^_' | grep -v Images | grep -v Files
cat ~/Documents/GitHub/PayloadsAllTheThings/<topic>/README.md
Each README has:
For injection classes with DBMS / language variants, read the specific file:
cat "~/Documents/GitHub/PayloadsAllTheThings/SQL Injection/MSSQL Injection.md"
For XSS specifically, check the CSP-bypass file when the target uses CSP:
cat "~/Documents/GitHub/PayloadsAllTheThings/Cross-Site Scripting/README.md"
ls "~/Documents/GitHub/PayloadsAllTheThings/<topic>/Intruder/"
head -50 "~/Documents/GitHub/PayloadsAllTheThings/<topic>/Intruder/<wordlist>.txt"
Copy the wordlist into Burp Intruder or pipe into a custom fuzzer. The wordlist paths are stable across upstream updates — safe to reference by path.
Return one or more of:
SLEEP(N) style) can trip monitoring systems and page on-call engineers. Use SLEEP(2) for validation, not SLEEP(30).Java & Spring payloads).npx claudepluginhub gitdiddy69/redcap --plugin redcap-payloadsProvides CDSS development patterns for drug interaction checking, dose validation, clinical scoring (NEWS2, qSOFA), and alert classification integrated into EMR workflows.