mcpField
S
security-payloads

security-payloads

github.com/eyadkellehSecurity394552 installsUpdated 20w ago
Repository

About security-payloads

security-payloads is a curated subset of SecLists Payloads for security testing. It provides exploitation payloads for authorized penetration tests, CTFs, and educational work.

Key features

  1. 01Antivirus test files
  2. 02Filename exploits
  3. 03Malicious file payloads

Use cases

  1. 01Check antivirus detection
  2. 02Test file upload defenses
  3. 03Check path traversal defenses
  4. 04Validate security controls

Install

Copy the command and run it in a terminal.

$npx skills add https://github.com/eyadkelleh/awesome-skills-security --skill security-payloads

After installing, type/security-payloadsin Claude Code to confirm it loaded.

Bundled files

References and scripts installed along with SKILL.md.

references/Payloads/
README.md
references/Payloads/Anti-Virus/
eicar-com.txt
references/Payloads/File-Names/
README.md
references/Payloads/File-Names/exec/
Hello`hostname`World.txt
Hello$(hostname)World.txt
references/Payloads/File-Names/null-byte/
Hello.php%00World.txt
Hello%00World.txt
references/Payloads/Flash/
xssproject.swf

Details

From the project README

SecLists Payloads (Curated)

Description

Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.

Source: SecLists/Payloads Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

  • Anti-virus testing
  • File upload testing
  • Path traversal testing
  • Security control validation

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

  • EICAR test file
  • Null byte file names
  • Command execution file names

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Payloads"

# List all available files
for root, dirs, files in os.walk(skill_path):
    for file in files:
        if file.endswith('.txt'):
            filepath = os.path.join(root, file)
            print(f"Found: {filepath}")
            
            # Read file content
            with open(filepath, 'r', errors='ignore') as f:
                content = f.read().splitlines()
                print(f"  Lines: {len(content)}")

Security & Ethics

Authorized Use Cases ✅
  • Authorized penetration testing with written permission
  • Bug bounty programs (within scope)
  • CTF competitions
  • Security research in controlled environments
  • Testing your own systems
  • Educational demonstrations
Prohibited Use Cases ❌
  • Unauthorized access attempts
  • Testing without permission
  • Malicious activities
  • Privacy violations
  • Any illegal activities

Complete SecLists Collection

This is a curated subset of SecLists. For the complete collection:


Generated by Skill Seeker | SecLists Payloads Collection License: MIT - Use responsibly with proper authorization

Comments

Markdown supported