About security-payloads
security-payloads is a curated subset of SecLists Payloads for security testing. It provides exploitation payloads for authorized penetration tests, CTFs, and educational work.
Key features
- 01Antivirus test files
- 02Filename exploits
- 03Malicious file payloads
Use cases
- 01Check antivirus detection
- 02Test file upload defenses
- 03Check path traversal defenses
- 04Validate security controls
Install
Copy the command and run it in a terminal.
npx skills add https:/ / github.com/ eyadkelleh/ awesome-skills-security --skill security-payloadsAfter installing, type/security-payloadsin Claude Code to confirm it loaded.
Bundled files
References and scripts installed along with SKILL.md.
references/Payloads/README.mdreferences/Payloads/Anti-Virus/eicar-com.txtreferences/Payloads/File-Names/README.mdreferences/Payloads/File-Names/exec/Hello`hostname`World.txtHello$(hostname)World.txtreferences/Payloads/File-Names/null-byte/Hello.php%00World.txtHello%00World.txtreferences/Payloads/Flash/xssproject.swfDetails
From the project READMESecLists Payloads (Curated)
Description
Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.
Source: SecLists/Payloads Repository: https://github.com/danielmiessler/SecLists License: MIT
When to Use This Skill
Use this skill when you need:
- Anti-virus testing
- File upload testing
- Path traversal testing
- Security control validation
⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.
Key Files in This Skill
EICAR test fileNull byte file namesCommand execution file names
Usage Example
# Access files from this skill
import os
# Example: Load patterns/payloads
skill_path = "references/Payloads"
# List all available files
for root, dirs, files in os.walk(skill_path):
for file in files:
if file.endswith('.txt'):
filepath = os.path.join(root, file)
print(f"Found: {filepath}")
# Read file content
with open(filepath, 'r', errors='ignore') as f:
content = f.read().splitlines()
print(f" Lines: {len(content)}")
Security & Ethics
Authorized Use Cases ✅
- Authorized penetration testing with written permission
- Bug bounty programs (within scope)
- CTF competitions
- Security research in controlled environments
- Testing your own systems
- Educational demonstrations
Prohibited Use Cases ❌
- Unauthorized access attempts
- Testing without permission
- Malicious activities
- Privacy violations
- Any illegal activities
Complete SecLists Collection
This is a curated subset of SecLists. For the complete collection:
- Full repository: https://github.com/danielmiessler/SecLists
- Size: 4.5 GB with 6,000+ files
- All categories: Passwords, Usernames, Discovery, Fuzzing, Payloads, Web-Shells, Pattern-Matching, AI, Miscellaneous
Generated by Skill Seeker | SecLists Payloads Collection License: MIT - Use responsibly with proper authorization