원클릭으로 Manus에서 모든 스킬 실행

시작하기

seclists

스타503

포크88

업데이트2026년 7월 8일 06:04

Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection.

설치

Codex 또는 Claude로 설치 이 Prompt를 복사해 Codex, Claude 또는 다른 어시스턴트에 붙여 넣으면 Skill 페이지를 검토하고 설치를 진행할 수 있습니다.

Manus에서 실행

출처

yv1ing

yv1ing/Z3r0

GitHub 저장소 열기 Creator 저장소 보기

다운로드

Manus에서 실행

SKILL.md

readonly

name	seclists
description	Use the built-in SecLists wordlists for authorized discovery, fuzzing, credential audits, and payload selection.

seclists

Use the built-in SecLists copy as the default wordlist source for authorized discovery and fuzzing tasks. Treat it as the archive snapshot bundled at image build time.

Resource Paths

SecLists is installed at:

/opt/seclists
/usr/share/seclists

Use /usr/share/seclists in commands unless a task needs the canonical install path.

Usage Rules

Choose wordlists that match the task: DNS, web content, parameters, usernames, passwords, payloads, or fuzzing.
Start with small or technology-specific lists before broad lists.
Do not use credential wordlists against live services without explicit authorization and lockout-safe limits.
Record the exact wordlist path used because it is part of the evidence trail.
Combine with ffuf, gobuster, hydra, or custom scripts only within the authorized scope.
Treat the bundled wordlists as build-time snapshot data. The image build can pin or change that snapshot with SECLISTS_REF.
Keep wordlist selection here as the canonical guidance; tool-specific skills should reference paths without duplicating the SecLists catalog.

Wordlist Selection

Select wordlists at runtime from the relevant SecLists area instead of assuming specific filenames are stable across upstream snapshots:

/usr/share/seclists/Discovery/Web-Content
/usr/share/seclists/Discovery/DNS
/usr/share/seclists/Usernames
/usr/share/seclists/Passwords
/usr/share/seclists/Fuzzing
/usr/share/seclists/Payloads

Pick candidate files at runtime with broad, task-oriented patterns and verify the selected path before a long run:

find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f | sort | sed -n '1,40p'
wordlist="$(find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f -iname '*small*' | sort | sed -n '1p')"
test -n "$wordlist"
test -f "$wordlist"

Output

Report the selected wordlist path, why it fits the task, and any tool command that consumed it.

이 저장소의 다른 Skills

같은 저장소

agent-browser-cli

yv1ing/Z3r0

Use agent-browser-cli to perceive and control the supervised Chrome browser inside the sandbox, interact with pages, capture screenshots/PDFs, inspect cookies/CDP/network/console state, and troubleshoot only when needed.

2026-07-08503

amass

yv1ing/Z3r0

Use OWASP Amass for authorized asset discovery, domain enumeration, and DNS intelligence on in-scope targets.

2026-07-08503

apktool

yv1ing/Z3r0

Use apktool for authorized Android APK resource decoding, manifest review, smali inspection, rebuild checks, and static mobile artifact triage.

2026-07-08503

archive-file-triage

yv1ing/Z3r0

Use file, 7z, unzip, tar-compatible tools, hashes, and bounded shell inspection for safe triage of provided archives and unknown files.

2026-07-08503

binwalk

yv1ing/Z3r0

Use binwalk for authorized firmware, binary blob, archive, filesystem, and embedded-content triage with bounded extraction and evidence handling.

2026-07-08503

checksec

yv1ing/Z3r0

Use the pwntools-provided checksec CLI for authorized ELF hardening review, mitigation checks, and binary triage evidence.

2026-07-08503

seclists

Use the built-in SecLists copy as the default wordlist source for authorized discovery and fuzzing tasks. Treat it as the archive snapshot bundled at image build time.

Resource Paths

SecLists is installed at:

/opt/seclists /usr/share/seclists

Use /usr/share/seclists in commands unless a task needs the canonical install path.

Usage Rules

Choose wordlists that match the task: DNS, web content, parameters, usernames, passwords, payloads, or fuzzing.

Start with small or technology-specific lists before broad lists.

Do not use credential wordlists against live services without explicit authorization and lockout-safe limits.

Record the exact wordlist path used because it is part of the evidence trail.

Combine with ffuf, gobuster, hydra, or custom scripts only within the authorized scope.

Treat the bundled wordlists as build-time snapshot data. The image build can pin or change that snapshot with SECLISTS_REF.

Keep wordlist selection here as the canonical guidance; tool-specific skills should reference paths without duplicating the SecLists catalog.

Wordlist Selection

Select wordlists at runtime from the relevant SecLists area instead of assuming specific filenames are stable across upstream snapshots:

/usr/share/seclists/Discovery/Web-Content /usr/share/seclists/Discovery/DNS /usr/share/seclists/Usernames /usr/share/seclists/Passwords /usr/share/seclists/Fuzzing /usr/share/seclists/Payloads

Pick candidate files at runtime with broad, task-oriented patterns and verify the selected path before a long run:

find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f | sort | sed -n '1,40p' wordlist="$(find /usr/share/seclists/Discovery/Web-Content -maxdepth 2 -type f -iname '*small*' | sort | sed -n '1p')" test -n "$wordlist" test -f "$wordlist"

Output

Report the selected wordlist path, why it fits the task, and any tool command that consumed it.