wooyun
WooYun Legacy security testing skill based on 22,132 WooYun (2010-2016) business logic vulnerability cases. Provides real-company case references, quantitative statistics, and data-driven test priority ordering across 6 domains and 33 vulnerability categories (auth bypass, IDOR/privilege escalation, financial security, information disclosure, logic flaws, misconfiguration). Trigger when doing web security testing, e-commerce payment security, SaaS IDOR/privilege escalation audits, password reset/weak credential/verification code bypass testing, race condition analysis, SRC bug bounty planning, writing evidence-backed security reports for Chinese enterprises (government OA, telecom, banking), or security training/compliance support. Not a replacement for pentest technique training; it augments existing testing skills with real cases and data backing.
Source facts
- Repository
- lsongdev/skills
- Last source activity
- August 6, 2026 at 04:10
- Detected SKILL.md language
- Chinese
- Stars
- 0
- Forks
- 0
Install options
The review-first prompt is selected by default. You can switch to a direct command or download a local copy.
Review the source files
Read SKILL.md and any companion files shown by SkillsMP before deciding whether to install.