jimmy-fuzz

Generate adversarial payloads for XSS, SQL injection, and path traversal attacks.

2|2|Updated Apr 2, 2026
One-click install
npx skills add https://github.com/andrewthetechie/jimmy-skills --skill jimmy-fuzz
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: jimmy-fuzz
Source: https://github.com/andrewthetechie/jimmy-skills/tree/main/.claude/skills/jimmy-fuzz
Command: npx skills add https://github.com/andrewthetechie/jimmy-skills --skill jimmy-fuzz

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This skill addresses the challenge of quickly generating large numbers of adversarial payloads for security testing, allowing users to create a comprehensive payload corpus for manual testing.

Core Features & Use Cases

  • Adversarial Payload Generation: Generate payloads for a variety of attack categories such as XSS, SQL injection, and path traversal.
  • Parallel Processing: Use parallel batch mode to generate payloads across multiple attack categories simultaneously.
  • Customization: Customize the number of payloads generated per attack category and set a maximum concurrent HTTP requests.
  • Use Case: Generate a diverse set of XSS and SQL injection payloads for a new web application under development to ensure security.

Quick Start

Use the jimmy-fuzz skill to generate 10 XSS payloads for a login form with a username parameter by running 'jimmy-fuzz --attack_surface "login form" --attack_types ["xss"] --n 10'.

Frequently Asked Questions about jimmy-fuzz

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate adversarial payloads for security testing?

Generating adversarial payloads for security testing involves providing an attack surface description and target attack types. The system then automates payload creation across multiple categories simultaneously using parallel HTTP requests for efficiency.

What is the best way to create a large corpus of XSS and SQL injection payloads?

The best way to create a large corpus of XSS and SQL injection payloads is using parallel batch processing. You specify the attack categories and desired payload count per category, and the tool generates them concurrently to maximize efficiency.

Can I customize the number of payloads generated for each attack type?

Yes, you can customize the number of payloads generated for each attack type. You specify the exact payload count per attack category and can set a maximum limit for concurrent HTTP requests to balance generation speed.

Does parallel fuzzing work for testing multiple vulnerability categories at once?

Parallel fuzzing does work for testing multiple vulnerability categories at once. The tool utilizes parallel batch mode to generate adversarial payloads across various attack types simultaneously, streamlining the security testing process.

How do I test a login form username parameter for path traversal and XSS vulnerabilities?

To test a login form username parameter for path traversal and XSS, pass the attack surface description and an array of attack types to the generator. It creates the specified payloads to help you manually test the application's security.