wooyun-legacy

🥈Silver

wooyun-legacy skill enables Claude to analyze and identify vulnerabilities using a database of 88,636 real-world security flaws. Security teams and developers benefit from automated vulnerability assessment, threat modeling, and secure code review. It connects to code repositories and CI/CD pipelines for proactive security checks.

1,2412210Updated Today

Intermediate30min to implementautomation

Saves ~45 min per use

Quick InstallView Source

git clone https://github.com/tanweai/wooyun-legacy.git

Works with:

Claude

Overview

About This Skill

Use Cases

Analyze SQL injection vulnerabilities in your web applications.

Identify and mitigate command execution risks in your software.

Educate your team on common security flaws like XSS and unauthorized access.

Perform authorized security assessments using real-world vulnerability data.

Setup & Installation

Quick Install

No install command available. Check the GitHub repository for manual installation instructions.

Alternative Install (Git Clone)

git clone https://github.com/tanweai/wooyun-legacy

Requirements

Claude Code or compatible AI agent
Works with: Claude

Quick Start Guide

Install the Skill

Copy the install command above and run it in your terminal.

Open Your AI Agent

Launch Claude Code, Cursor, or your preferred AI coding agent.

Try It Out

Use the prompt template or examples below to test the skill.

Customize

Adapt the skill to your specific use case and workflow.

Usage Examples

Prompt Template

I need to use the wooyun-legacy skill to analyze vulnerabilities in [COMPANY]'s [INDUSTRY] systems. Please provide a detailed breakdown of known issues related to [SPECIFIC_TECHNOLOGY_OR_SYSTEM] from the Wooyun legacy database. Focus on [SPECIFIC_CONCERN] and suggest mitigation strategies.

Example Output

## Vulnerability Analysis for [COMPANY]'s [INDUSTRY] Systems

### Known Issues in [SPECIFIC_TECHNOLOGY_OR_SYSTEM]

- **SQL Injection Vulnerabilities**: Multiple instances of SQLi detected in legacy systems.
  - *Impact*: Potential unauthorized data access.
  - *Mitigation*: Implement parameterized queries and regular security audits.

- **Cross-Site Scripting (XSS)**: Found in web applications handling user input.
  - *Impact*: Risk of session hijacking and data theft.
  - *Mitigation*: Sanitize all user inputs and use Content Security Policy (CSP).

- **Insecure Direct Object References (IDOR)**: Identified in API endpoints.
  - *Impact*: Unauthorized access to sensitive data.
  - *Mitigation*: Enforce strict access controls and use indirect references.

### Recommendations

1. **Regular Security Audits**: Conduct quarterly security assessments to identify and address new vulnerabilities.
2. **Patch Management**: Ensure timely application of security patches for all systems.
3. **Security Training**: Provide ongoing training for developers on secure coding practices.
4. **Incident Response Plan**: Develop and maintain an up-to-date incident response plan.