Provides WooYun vulnerability case data and statistics for business logic security testing.
npx skills add https://github.com/lsongdev/skills --skill wooyun-lsongdev
Please help me install this Agent Skill. Skill: wooyun Source: https://github.com/lsongdev/skills/tree/main/wooyun Command: npx skills add https://github.com/lsongdev/skills --skill wooyun-lsongdev
High-intent search queries and answers about installing and using this skill.
Use the WooYun case statistics to rank test targets by historical severity ratios, such as password reset flaws at 88% high-severity. The skill provides data-driven priority ordering across 33 vulnerability categories to focus testing effort.
The dataset covers 6 domains and 33 categories: authentication bypass, IDOR and privilege escalation, financial security like payment tampering, information disclosure, logic flaws including race conditions, and misconfiguration.
Yes, the cases come from real Chinese companies including government OA systems, telecom operators, and banks. They provide evidence-backed references that make security reports more persuasive for local clients.
No, it does not replace pentest technique training. It augments existing security testing skills with real case references, quantitative statistics, and attack pattern distributions from historical data.
The data covers 2010-2016, so cloud-native, GraphQL, and Serverless scenarios have limited coverage. However, business logic attack patterns remain relatively stable over time, so the cases still hold reference value.
AKasem1Identifies business logic vulnerabilities in web and API authentication, payment, and verification flows.
pruizValidate vulnerability findings with structured evidence collection and sandbox testing.
Corvalis-LLCScan Node.js codebases for security vulnerabilities and output a JSON report.
statick88Correlate CVE data, MITRE ATT&CK techniques, and social OSINT for threat intelligence.
