Dan Guido
e19ea6d536
* Add wooyun-legacy plugin for web vulnerability testing methodology Web vulnerability testing methodology distilled from 88,636 real-world cases from the WooYun vulnerability database (2010-2016). Covers SQL injection, XSS, command execution, file upload, path traversal, unauthorized access, information disclosure, and business logic flaws. Content translated from Chinese to English, anonymized (vendor names, IP addresses, and domains replaced with generic descriptions), and restructured into Claude Code plugin format. Includes 8 full reference files, 14 testing checklists extracted from category data, and 2 anonymized methodology case studies (banking and telecom penetration). Licensed under CC BY-NC-SA 4.0 (differs from repo license). Attribution: tanweai / wooyun-legacy contributors. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Fix CI: adjust paths that trigger hardcoded-path check Change `/Users/AssociationManage/` to `/users/AssociationManage/` and `/home/www/` to `/home/[webuser]/` to avoid false positives from the CI grep pattern while preserving the security payload examples. Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> * Address review findings: trim bloat, normalize formatting, fix references - Cut ~3,000 lines of redundant content from sql-injection.md, command-execution.md, and file-upload.md while preserving all WooYun case IDs, vendor-specific payloads, and unique methodology - Normalize all reference titles to "Analysis Methodology" suffix - Standardize blockquote attribution format across all references - Add table of contents to sql-injection, command-execution, file-upload, and path-traversal references - Convert all SKILL.md links to use {baseDir} placeholder - Add authorization language to SKILL.md "When to Use" section - Add RCE vs Command Execution clarification note - Fix cross-references in bank-penetration.md and telecom-penetration.md - Replace t.cn/dnslog.cn domains with .example placeholders - Fix date typo (2025 → 2026) in command-execution.md Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com> --------- Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
3.3 KiB
wooyun-legacy
Web vulnerability testing methodology distilled from 88,636 real-world cases from the WooYun vulnerability database (2010-2016).
Installation
/plugin marketplace add trailofbits/skills-curated
/plugin menu
Select wooyun-legacy from the plugin list.
Usage
The skill activates automatically when performing:
- Penetration testing or vulnerability assessment
- Security-focused code review
- Vulnerability research
- Security test case development
Coverage
Full References (methodology + bypass techniques + case analysis)
| Category | Cases | File |
|---|---|---|
| SQL Injection | 27,732 | references/sql-injection.md |
| XSS | 7,532 | references/xss.md |
| Command Execution | 6,826 | references/command-execution.md |
| File Upload | 2,711 | references/file-upload.md |
| Path Traversal | 2,854 | references/path-traversal.md |
| Unauthorized Access | 14,377 | references/unauthorized-access.md |
| Information Disclosure | 7,337 | references/info-disclosure.md |
| Business Logic Flaws | 8,292 | references/logic-flaws.md |
Testing Checklists (empirical patterns from case data)
| Category | File |
|---|---|
| SQL Injection | references/checklists/sql-injection-checklist.md |
| XSS | references/checklists/xss-checklist.md |
| Command Execution | references/checklists/command-execution-checklist.md |
| File Upload | references/checklists/file-upload-checklist.md |
| Path Traversal | references/checklists/path-traversal-checklist.md |
| Unauthorized Access | references/checklists/unauthorized-access-checklist.md |
| Information Disclosure | references/checklists/info-disclosure-checklist.md |
| Business Logic Flaws | references/checklists/logic-flaws-checklist.md |
| CSRF | references/checklists/csrf-checklist.md |
| SSRF | references/checklists/ssrf-checklist.md |
| Weak Passwords | references/checklists/weak-password-checklist.md |
| Misconfiguration | references/checklists/misconfig-checklist.md |
| RCE | references/checklists/rce-checklist.md |
| XXE | references/checklists/xxe-checklist.md |
Methodology Case Studies (anonymized)
| Case Study | File |
|---|---|
| Financial institution attack chain | references/bank-penetration.md |
| Telecom carrier penetration | references/telecom-penetration.md |
Attribution
This plugin is based on wooyun-legacy by tanweai and the wooyun-legacy contributors. The original knowledge base was built from the WooYun open vulnerability disclosure platform (2010-2016).
Content has been translated from Chinese to English, anonymized (vendor names, IP addresses, and domains replaced with generic descriptions), and restructured into the Claude Code plugin format.
License
This plugin is licensed under CC BY-NC-SA 4.0 (Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International).
This license differs from the repository-level license. You may share and adapt this material for non-commercial purposes, with attribution, under the same license terms.
Disclaimer
This knowledge base is provided for educational purposes and authorized security testing only. Use only against systems you have explicit permission to test. The authors are not responsible for misuse.