web-security
Exploits web application vulnerabilities. Use when working with SQL injection, XSS, SSRF, SSTI, command injection, path traversal, authentication bypass, deserialization, or any web-based CTF challenge.
When & Why to Use This Skill
This Claude skill provides a comprehensive toolkit for web application security testing and vulnerability exploitation. It streamlines the penetration testing lifecycle by offering structured workflows for reconnaissance, technology detection, and the identification of critical flaws such as SQL injection, XSS, SSRF, and authentication bypass. By integrating industry-standard tool references and automated fuzzing techniques, it empowers security professionals and developers to proactively secure web environments and excel in CTF challenges.
Use Cases
- Penetration Testing: Automate the discovery and exploitation of common web vulnerabilities like SQLi, XSS, and Command Injection to assess application security.
- CTF Competitions: Rapidly identify technology stacks, perform directory enumeration, and develop exploits to capture flags in security challenges.
- Web Reconnaissance: Efficiently gather information on target systems by checking for exposed sensitive files (e.g., .git, robots.txt) and mapping the attack surface.
- Vulnerability Research: Utilize specialized tools like sqlmap, commix, and tplmap through guided workflows to validate complex injection points and session flaws.
| name | web-security |
|---|---|
| description | Exploits web application vulnerabilities. Use when working with SQL injection, XSS, SSRF, SSTI, command injection, path traversal, authentication bypass, deserialization, or any web-based CTF challenge. |
| allowed-tools | Bash, Read, Write, Grep, Glob |
Web Security Skill
Quick Workflow
Progress:
- [ ] Identify technology stack
- [ ] Check common files (robots.txt, .git)
- [ ] Test injection points (SQLi, XSS, SSTI)
- [ ] Check authentication/session flaws
- [ ] Develop exploit
- [ ] Extract flag
Quick Recon
# Directory enumeration
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt
ffuf -u http://target/FUZZ -w wordlist.txt
# Technology detection
whatweb http://target
curl -I http://target
# Check robots.txt, .git exposure
curl http://target/robots.txt
curl http://target/.git/HEAD
Vulnerability Reference
| Vulnerability | Reference File |
|---|---|
| SQL Injection | reference/sqli.md |
| XSS | reference/xss.md |
| SSTI | reference/ssti.md |
| Command Injection | reference/command-injection.md |
| SSRF / Path Traversal | reference/ssrf-lfi.md |
| Auth Bypass / Deserialization | reference/auth-deser.md |
Tools Quick Reference
| Tool | Purpose | Command |
|---|---|---|
| sqlmap | SQLi automation | sqlmap -u URL --dbs |
| commix | Command injection | commix -u URL |
| tplmap | SSTI automation | tplmap -u URL |
| ffuf | Fuzzing | ffuf -u URL/FUZZ -w wordlist |
| Burp Suite | Proxy/intercept | GUI |
| jwt_tool | JWT attacks | jwt_tool TOKEN |