/usr/share/w3af/plugins/attack/payloads/ is in w3af-console 1.0-rc3svn3489-1.
This file is owned by root:root, with mode 0o755.
..
/usr/share/w3af/plugins/attack/payloads/__init__.py
/usr/share/w3af/plugins/attack/payloads/code/
/usr/share/w3af/plugins/attack/payloads/code/code.php
/usr/share/w3af/plugins/attack/payloads/payloads.py
/usr/share/w3af/plugins/attack/payloads/webshell/
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.asp
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.aspx
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.jsp
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.php
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.pl
/usr/share/w3af/plugins/attack/payloads/webshell/webshell.py