skills.rest
Bsh13lder
Bsh13lderCOMMUNITY
Explore all skills by this author →
GitHub

security-arsenal

Supply security professionals with payloads and bypass techniques for web application vulnerability testing.

4|Updated Mar 12, 2026
Search Tags:#security#sql injection#xss#bypass#payloads#ssrf#xxe
One-click install
npx skills add https://github.com/Bsh13lder/Lazy-Claw --skill security-arsenal-bsh13lder
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: security-arsenal
Source: https://github.com/Bsh13lder/Lazy-Claw/tree/main/claude-bug-bounty/skills/security-arsenal
Command: npx skills add https://github.com/Bsh13lder/Lazy-Claw --skill security-arsenal-bsh13lder

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill provides security researchers and penetration testers with essential payloads, bypass techniques, and detailed exploit patterns to identify vulnerabilities and assess security defenses effectively.

Core Features & Use Cases

  • Payload Libraries: Extensive collection of payloads for XSS, SQLi, SSRF, XXE, Path Traversal, and more to test web application vulnerabilities.
  • Bypass Techniques: Demonstration of common bypass methods for WAFs, CSPs, and authentication mechanisms to evaluate security measures.
  • Use Case: Quickly generate specialized payloads for a specific attack vector, such as crafting SSRF bypass URLs or XSS inline scripts, during security assessments.

Quick Start

Use this Skill to obtain relevant exploit payloads for testing an input sanitation vulnerability in a web form.

Frequently Asked Questions about security-arsenal

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I generate payloads for testing XSS and SQL injection vulnerabilities?▼

You generate payloads for testing XSS and SQL injection by accessing an extensive library of attack patterns designed to identify input sanitation vulnerabilities. This provides specialized exploit strings for various attack vectors.

What techniques bypass WAF and CSP restrictions during web application security testing?▼

Bypass techniques for WAF and CSP restrictions include demonstration methods that circumvent common security measures and authentication mechanisms. This evaluates security defenses by providing specific bypass strategies.

Can I use this to quickly craft SSRF bypass URLs for penetration testing?▼

Yes, you can quickly craft SSRF bypass URLs for penetration testing by using the provided attack patterns. It allows security professionals to generate specialized payloads for specific attack vectors during assessments.

What specific web application vulnerabilities do these security payloads target?▼

These security payloads target web application vulnerabilities including XSS, SQL injection, SSRF, XXE, and Path Traversal. The comprehensive payload libraries ensure detailed exploit patterns across multiple attack vectors.

Are there specialized exploit patterns for testing path traversal vulnerabilities?▼

Yes, specialized exploit patterns for path traversal vulnerabilities are included. The payload libraries provide extensive collections of techniques to test web application vulnerabilities and assess security defenses effectively.

Related Skills

Explore More Software Engineering Skills→
dakshrawat298-gifdakshrawat298-gif

security-entry-point-analyzer

Map application entry points and input pathways to model the attack surface.

Community
Advanced
BoraPerusicBoraPerusic

sql-injection-testing

Detect, exploit, and validate SQL injection vulnerabilities in web applications.

Community
Advanced
gglessnergglessner
2

corellium-mcp

Orchestrate mobile penetration testing with Corellium virtual devices and Parley traffic interception.

Community
Advanced
vitoropereiravitoropereira

Cross-Site Scripting and HTML Injection Testing

Detect stored, reflected, and DOM-based XSS and HTML injection vulnerabilities in web applications.

Community
Advanced