by ANG13T
AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads 🪄
# Add to your Claude Code skills
git clone https://github.com/ANG13T/payload-wizardGuides for using ai agents skills like payload-wizard.
Last scanned: 5/30/2026
{
"issues": [
{
"type": "npm-audit",
"message": "@babel/runtime: Babel has inefficient RegExp complexity in generated code with .replace when transpiling named capturing groups",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "ajv: ajv has ReDoS when using `$data` option",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "brace-expansion: brace-expansion Regular Expression Denial of Service vulnerability",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "braces: Uncontrolled resource consumption in braces",
"severity": "high"
},
{
"type": "npm-audit",
"message": "cross-spawn: Regular Expression Denial of Service (ReDoS) in cross-spawn",
"severity": "high"
},
{
"type": "npm-audit",
"message": "flatted: flatted vulnerable to unbounded recursion DoS in parse() revive phase",
"severity": "high"
},
{
"type": "npm-audit",
"message": "js-yaml: js-yaml has prototype pollution in merge (<<)",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "micromatch: Regular Expression Denial of Service (ReDoS) in micromatch",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "minimatch: minimatch has a ReDoS via repeated wildcards with non-matching literal in pattern",
"severity": "high"
},
{
"type": "npm-audit",
"message": "nanoid: Predictable results in nanoid generation when given non-integer values",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "next: Next.js missing cache-control header may lead to CDN caching empty reply",
"severity": "critical"
},
{
"type": "npm-audit",
"message": "picomatch: Picomatch: Method Injection in POSIX Character Classes causes incorrect Glob Matching",
"severity": "high"
},
{
"type": "npm-audit",
"message": "postcss: PostCSS line return parsing error",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "semver: semver vulnerable to Regular Expression Denial of Service",
"severity": "high"
},
{
"type": "npm-audit",
"message": "word-wrap: word-wrap vulnerable to Regular Expression Denial of Service",
"severity": "medium"
},
{
"type": "npm-audit",
"message": "yaml: yaml is vulnerable to Stack Overflow via deeply nested YAML collections",
"severity": "medium"
}
],
"status": "FAILED",
"scannedAt": "2026-05-30T15:09:29.433Z",
"npmAuditRan": true,
"pipAuditRan": true
}No comments yet. Be the first to share your thoughts!
Requires a passing catalog security scan. Resolve the flagged issues and resubmit to enable featuring.
Payload Wizard is a web app AI assistant that utilizes GPT language models to interpret and generate cybersecurity payloads
Payload Wizard's core functionalities are twofold: cybersecurity interpretation & generation.
Generate custom payload scripts in any programming language by specifying the input's intended functionality.
Example Payloads Include:
Input any payload script and get a feature outline and analysis to aid your understanding of payload functionality
git clone https://github.com/ANG13T/payload-wizard
cd payload-wizard
npm i
npm run dev
Localhost server should be up and running on localhost:3000
Payload Wizard is open to any contributions. Please fork the repository and make a pull request with the features or fixes you want to implement. This project contains the MIT License.
/pages/utils/index.ts)If you enjoyed Payload Wizard, please consider becoming a sponsor in order to fund my future projects.
To check out my other works, visit my GitHub profile.
To check out Stellaryx Labs, visit stellaryxlabs.com