Technique Lookup
technique_lookupFind how to test a vulnerability class via PayloadsAllTheThings: get matching Cordon tools, vetted payload lists, and gf pattern packs. Search by class, tool, technologies, phase, or free-text query.
Instructions
Query the PayloadsAllTheThings technique index for how to test a bug class.
The counterpart to wstg_lookup: WSTG says what to check, this says how.
Each record names the Cordon tools that test the class, the vetted payload
lists, and the gf pattern packs that correspond to it. Retrieval, not
automation — nothing here fires anything, and it costs no budget.
Five ways in, most specific first:
class_name— one technique in full ("sql-injection", "open-redirect")tool— every technique a given Cordon tool covers ("sqli_validate")technologies— comma-separated stack from http_probe ("Rails,MongoDB,GraphQL")query— free text ("jwt forgery", "deserialization")phase— everything in a phase (input_validation, authentication …)
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| tool | No | ||
| phase | No | ||
| query | No | ||
| class_name | No | ||
| technologies | No |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||