Agent skill
web-fuzzing
Web application security testing using fuzzing techniques to discover vulnerabilities, injection points, and edge cases
Install this agent skill to your Project
npx add-skill https://github.com/ljchg12-hue/dotfiles/tree/main/skills/web-fuzzing
SKILL.md
Web Fuzzing Skill
Automated security testing using fuzzing to discover web application vulnerabilities.
When to Use
- Security testing
- Vulnerability discovery
- Input validation testing
- API endpoint testing
Core Capabilities
- Parameter fuzzing
- Path traversal testing
- SQL injection detection
- XSS vulnerability scanning
- Command injection testing
- File upload vulnerabilities
- Authentication bypass attempts
Tools
# ffuf (Fast web fuzzer)
ffuf -u https://target.com/FUZZ -w wordlist.txt
# wfuzz
wfuzz -c -z file,wordlist.txt https://target.com/FUZZ
# Burp Suite Intruder
# SQLmap for SQL injection
sqlmap -u "https://target.com/page?id=1" --batch
# XSStrike
python xsstrike.py -u "https://target.com/search?q=test"
Fuzzing Patterns
- Path traversal:
../../../etc/passwd - SQL injection:
' OR '1'='1 - Command injection:
; ls -la - XSS:
<script>alert(1)</script>
Best Practices
- Get authorization before testing
- Use rate limiting
- Test in staging environment
- Document findings
- Follow responsible disclosure
Resources
- ffuf: https://github.com/ffuf/ffuf
- OWASP Testing Guide: https://owasp.org/www-project-web-security-testing-guide/
Recommended Agent Skills
Expand your agent's capabilities with these related and highly-rated skills.
ljchg12-hue/dotfiles
random-selection
Randomly select items from lists using various algorithms for fair and unbiased selection
ljchg12-hue/dotfiles
threat-hunting
Proactive threat detection using Sigma rules, IOCs, and behavioral analytics
ljchg12-hue/dotfiles
auth-implementation-patterns
Master authentication and authorization patterns including JWT, OAuth2, session management, and RBAC to build secure, scalable access control systems. Use when implementing auth systems, securing APIs, or debugging security issues.
ljchg12-hue/dotfiles
debugging-strategies
Master systematic debugging techniques, profiling tools, and root cause analysis to efficiently track down bugs across any codebase or technology stack. Use when investigating bugs, performance issues, or unexpected behavior.
ljchg12-hue/dotfiles
sql-optimization-patterns
Master SQL query optimization, indexing strategies, and EXPLAIN analysis to dramatically improve database performance and eliminate slow queries. Use when debugging slow queries, designing database schemas, or optimizing application performance.
ljchg12-hue/dotfiles
monorepo-management
Master monorepo management with Turborepo, Nx, and pnpm workspaces to build efficient, scalable multi-package repositories with optimized builds and dependency management. Use when setting up monorepos, optimizing builds, or managing shared dependencies.
Didn't find tool you were looking for?