SkillsAdd

smithery/kiwamizamurai

web-security

Exploits web application vulnerabilities. Use when working with SQL injection, XSS, SSRF, SSTI, command injection, path traversal, authentication bypass, deserialization, or any web-based CTF challenge.

Installation

$ npx skills add smithery/kiwamizamurai --skill web-security
View on skills.sh ↗ Website ↗

Similar popular skills

Related neighbors and high-traction skills in the same topics — useful to compare before installing.

azure-storage Same topic
microsoft/azure-skills

Azure Storage Services including Blob Storage, File Shares, Queue Storage, Table Storage, and D…

567.1K installs
azure-kusto Same topic
microsoft/azure-skills

Query and analyze data in Azure Data Explorer (Kusto/ADX) using KQL for log analytics, telemetr…

566.2K installs
supabase-postgres-best-practices Same topic
supabase/agent-skills

Postgres best practices maintained by Supabase, for Postgres running anywhere. Load this skill …

391.6K installs
prisma-database-setup Same topic
prisma/skills

Guides for configuring Prisma with different database providers (PostgreSQL, MySQL, SQLite, Mon…

269.8K installs
prisma-client-api Same topic
prisma/skills

Prisma Client API reference covering model queries, filters, operators, and client methods. Use…

269.3K installs
prisma-cli Same topic
prisma/skills

Prisma ORM CLI commands reference covering init, generate, migrate, db, dev, complete, studio, …

267K installs

Also in this package

Other skills from smithery/kiwamizamurai.

npx skills add smithery/kiwamizamurai
osint 0 networking 0 mobile-security 0 binary-analysis 0

Browse all from smithery/kiwamizamurai

More details

Agent compatibility

Declared targets from SKILL.md / docs. Unmarked agents are not listed — the skill may still install via the CLI.

Claude Code Not declared
Cursor Not declared
Codex Not declared
GitHub Copilot Not declared
Windsurf Not declared
Gemini CLI Not declared
Cline Not declared
OpenCode Not declared

Skill metadata

Parsed from SKILL.md frontmatter.

Allowed toolsBash, Read, Write, Grep, Glob

Package contents

Files included with this skill beyond the listing page.

  • skill md SKILL.md 1,756 B
  • docs SUMMARY.md 222 B

History

  1. First recorded snapshot · 0 installs

SKILL.md

Web Security Skill

Quick Workflow

Progress:
- [ ] Identify technology stack
- [ ] Check common files (robots.txt, .git)
- [ ] Test injection points (SQLi, XSS, SSTI)
- [ ] Check authentication/session flaws
- [ ] Develop exploit
- [ ] Extract flag

Quick Recon

# Directory enumeration
gobuster dir -u http://target -w /usr/share/wordlists/dirb/common.txt
ffuf -u http://target/FUZZ -w wordlist.txt

# Technology detection
whatweb http://target
curl -I http://target

# Check robots.txt, .git exposure
curl http://target/robots.txt
curl http://target/.git/HEAD

Vulnerability Reference

Vulnerability Reference File
SQL Injection [reference/sqli.md](reference/sqli.md)
XSS [reference/xss.md](reference/xss.md)
SSTI [reference/ssti.md](reference/ssti.md)
Command Injection [reference/command-injection.md](reference/command-injection.md)
SSRF / Path Traversal [reference/ssrf-lfi.md](reference/ssrf-lfi.md)
Auth Bypass / Deserialization [reference/auth-deser.md](reference/auth-deser.md)

Tools Quick Reference

Tool Purpose Command
sqlmap SQLi automation sqlmap -u URL --dbs
commix Command injection commix -u URL
tplmap SSTI automation tplmap -u URL
ffuf Fuzzing ffuf -u URL/FUZZ -w wordlist
Burp Suite Proxy/intercept GUI
jwt_tool JWT attacks jwt_tool TOKEN