skills.rest
lycheer1126
lycheer1126COMMUNITY
Explore all skills by this author →
GitHub

vuln-classes

Documents detection signals, exploitation payloads, and WAF bypass techniques for twelve web vulnerability classes.

2|1|Updated Aug 28, 2026
Search Tags:#xss#penetration testing#web security#vulnerability detection#sqli#ssrf#waf bypass
One-click install
npx skills add https://github.com/lycheer1126/xs-bigdan --skill vuln-classes-lycheer1126
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-classes
Source: https://github.com/lycheer1126/xs-bigdan/tree/main/knowledge/skills/vuln_classes
Command: npx skills add https://github.com/lycheer1126/xs-bigdan --skill vuln-classes-lycheer1126

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve? Security testers need a consolidated reference of vulnerability detection signals and exploitation payloads during authorized web application assessments, instead of recalling syntax for each vulnerability class from memory. ## Core Features & Use Cases - Detection & Exploitation Reference: Covers XSS, SQLi, SSRF, IDOR, SSTI, path traversal, file upload, XXE, CSRF, CORS, prototype pollution, and business logic flaws with concrete payloads. - WAF Bypass Techniques: Provides obfuscation methods per class, such as comment obfuscation for SQLi, polyglot payloads for XSS, and decimal/octal IP encoding for SSRF. - Use Case: During an authorized penetration test, when an input parameter reflects in an HTML attribute context, look up the attribute-context XSS payloads and WAF bypass vectors to confirm exploitability and demonstrate impact. ## Quick Start Ask the agent to look up detection signals and payloads for a specific vulnerability class such as SSRF or SSTI when testing an authorized target.

Frequently Asked Questions about vuln-classes

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect and exploit XSS in different contexts?▼

XSS detection checks whether input is reflected in HTML, attribute, or JavaScript contexts, then applies context-matched payloads such as event handlers for attributes or script-breakout strings for JS contexts. The reference also lists WAF bypass vectors like polyglots and HTML entities.

What SQL injection payloads work for MySQL, PostgreSQL, and MSSQL?▼

Each database has specific payloads: MySQL uses SLEEP(5) for time-based tests, PostgreSQL uses pg_sleep(5), and MSSQL uses WAITFOR DELAY. UNION-based extraction queries target information_schema.tables or sys.tables depending on the engine.

How do I test for SSRF against cloud metadata endpoints?▼

SSRF testing targets URL parameters that fetch external resources, using payloads like 169.254.169.254 for AWS, metadata.google.internal for GCP, and 100.100.100.200 for Alibaba Cloud. Bypass techniques include decimal IP encoding, DNS rebinding, and 302 redirects.

Does this reference cover WAF bypass techniques?▼

Yes, WAF bypass methods are documented per vulnerability class. Examples include comment obfuscation and case variation for SQLi, polyglot and entity-encoded payloads for XSS, and alternative IP representations for SSRF filters.

When should these exploitation payloads be used?▼

These payloads are intended only for explicitly authorized targets, such as SRC-listed programs or written engagement scopes. Using them against unauthorized systems is illegal, and the parent project requires scope whitelisting before any testing begins.

Related Skills

Explore More Software Engineering Skills→
DorianGalloDorianGallo
5

recon-and-methodology

Guide systematic reconnaissance and bug bounty methodology for attack surface mapping.

Community
Advanced
kaminocorpkaminocorp
1

Vulnerability Report Writing

Generate bounty-ready vulnerability reports with CVSS scoring and evidence-based severity calibration.

Official
Intermediate
six2dezsix2dez
1.4k

burp-scan

Coordinate Burp Suite scans via MCP for vulnerability identification.

Community
Advanced
GuicedEEGuicedEE
5

terraform-plan-analyzer

Analyzes Terraform plan JSON to identify resource changes and risks.

Official
Advanced