# RTExit Payload Reference

This repository intentionally keeps payload references defensive and low-risk.

## Rules

- Prefer harmless markers over exploit payloads.
- Use lab-only payloads outside production.
- Do not store real credentials, web shells, malware, or client data in this repository.
- Every payload class used in a report must include remediation guidance.

## Safe Marker Examples

| Class | Marker |
|---|---|
| XSS | `RTEXIT_XSS_MARKER` |
| SSTI | `RTEXIT_TEMPLATE_MARKER` |
| SQLi | Boolean behavior probe against test data |
| SSRF | Controlled callback URL |
| File upload | Text file with known hash |

