sm0g-payloads 0.1.4

Payload collections, encoders, and WAF signatures for the SM0G security tools

sm0g-payloads

Payload library for the SM0G security-testing tools — curated XSS and SQL-injection payloads, reversible obfuscation / WAF-evasion encoders, and WAF fingerprint signatures. Pure standard library, zero runtime dependencies.

For authorized security testing only.

Install

pip install sm0g-payloads

What's inside

• xss/ — context-aware XSS payloads (HTML body, attribute, JS, framework, and modern browser vectors)
• sqli/ — SQL-injection payloads (error, boolean, time-based, union, OOB, fingerprinting, and extraction helpers)
• encode/twist.py — twist_payload / twist_chain reversible obfuscation and WAF-evasion transforms
• encoders/ — base64 / percent / HTML-entity encoders
• waf/ — WAF fingerprints and bypass strings
• markers.py — reflection markers (stamp_token / token_visible)
• jslib.py — known-vulnerable JavaScript library detection

License

AGPL-3.0-or-later