security-arsenal

Generate security payloads for web vulnerability testing and bug bounty hunting.

Updated Jul 1, 2026

Search Tags:#security #vulnerability #bypass #payloads #bug bounty

Ready to run

npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill security-arsenal-bpnrockstar

💬 Prompt for ChatGPT / Claude Chat▼

Please help me install this Agent Skill.
Skill: security-arsenal
Source: https://github.com/bpnrockstar/UnifiedBugHunter/tree/main/skills/security-arsenal
Command: npx skills add https://github.com/bpnrockstar/UnifiedBugHunter --skill security-arsenal-bpnrockstar

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes scripts (resource) and references (resource) components.

What problem does it solve?

This Skill provides access to a comprehensive set of security payloads, bypass tables, and submission rules, enabling efficient vulnerability assessment and bug bounty hunting.

Core Features & Use Cases

Security Payloads: Offers a wide range of payloads for XSS, SSRF, SQLi, XXE, NoSQLi, command injection, SSTI, IDOR, path traversal, HTTP smuggling, WebSocket, and MFA bypass.
Bypass Techniques: Contains detailed explanations and examples of various bypass techniques for WAFs, rate limits, and other security measures.
Submission Rules: Helps determine what findings are submittable and what should be avoided during bug bounty hunting.

Quick Start

Use the security-arsenal skill to generate payloads for SQL injection and test your application.

Frequently Asked Questions about security-arsenal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema

How do I generate security payloads for testing web application vulnerabilities like XSS and SQLi?▼

Security payloads for vulnerabilities like XSS, SQLi, SSRF, and XXE can be generated using specialized collections that provide ready-to-use injection strings. This Skill offers a comprehensive set of payloads and bypass techniques to identify and exploit web application vulnerabilities efficiently.

What is the best way to bypass WAF and rate limit restrictions during penetration testing?▼

Bypassing WAFs and rate limits requires detailed explanations and examples of various evasion techniques. This Skill contains specific bypass tables and methods designed to circumvent security measures, enabling more effective vulnerability assessment during security auditing.

Can I use this security arsenal for bug bounty hunting submissions?▼

Yes, this Skill is explicitly applicable for bug bounty hunting and includes submission rules. It helps determine exactly what vulnerability findings are submittable and what should be avoided, streamlining the reporting process for bug bounty programs.

Do I need prior knowledge of web vulnerabilities to use these bypass techniques and payloads?▼

Yes, using these payloads and bypass techniques requires existing knowledge of common web vulnerabilities and attack vectors. This Skill provides the arsenal for identification and exploitation but expects a foundational understanding of web security testing.

What types of injection payloads are available for web security auditing?▼

A wide range of injection payloads are available, including strings for NoSQLi, command injection, SSTI, IDOR, path traversal, HTTP smuggling, WebSocket, and MFA bypass. These cover diverse attack vectors needed for comprehensive penetration testing.

How does this collection handle edge cases like HTTP smuggling and WebSocket bypasses?▼

HTTP smuggling and WebSocket bypasses are handled through specific, dedicated payload categories within the collection. It provides targeted bypass techniques and payloads for these advanced attack vectors to ensure thorough vulnerability assessment.