web-security-testing
Web application security testing workflow for OWASP Top 10 vulnerabilities including injection, XSS, authentication flaws, and access control issues.
Target: Cloud, operations & security. Automatically collected · unverified.
Excerpt from the author’s documentation
Extracted from a fixed version of SKILL.md in its original language. This is the author’s documentation; installation, compatibility and runtime results have not been verified by this site.
Read the original English text
Topics in the source
- Web Security Testing Workflow
- Overview
- When to Use This Workflow
- Workflow Phases
- Phase 1: Reconnaissance
- Skills to Invoke
- Actions
- Copy-Paste Prompts
Specialized workflow for testing web applications against OWASP Top 10 vulnerabilities including injection attacks, XSS, broken authentication, and access control issues. Use this workflow when: Testing web application security Performing OWASP Top 10 assessment Conducting penetration tests Validating security controls Bug bounty hunting scanning-tools - Security scanning top-web-vulnerabilities - OWASP knowledge 1. Map application surface 2. Identify technologies 3. Discover endpoints 4. Find subdomains 5. Document findings sql-injection-testing - SQL injection sqlmap-database-pentesting - SQLMap 1. Test SQL injection 2. Test NoSQL injection 3. Test command injection 4. Test LDAP injection 5. Document vulnerabilities xss-html-injection - XSS testing html-injection-testing - HTML injection 1. Test reflected XSS 2. Test stored XSS 3. Test DOM-based XSS 4. Test XSS filters 5. Document findings broken-authentication - Authentication testing 1. Test credential stuffing 2. Test brute force protection 3. Test session management 4. Test password policies 5. Test MFA implementation idor-testing - IDOR testing file-path-traversal - Path traversal 1. Test vertical privilege escalation 2. Tes
This is an excerpt. Refer to the complete source and its current requirements.
- Source repository
- davila7/claude-code-templates
- Source file
- cli-tool/components/skills/security/web-security-testing/SKILL.md
- Fixed revision
- 21be197f100a12b8d0dd9a211cc244c8179f84d3
Sources and evidence
This record was collected automatically. Its documentation, suitability and runtime behavior have not been manually verified.
Author: davila7/claude-code-templates · original repository metadata. Documentation review: Not reviewed. Last source check: 2026-11-09T15:01:40.650Z.
Categories are inferred from names, descriptions and paths. They do not establish compatibility.
License and attribution
MIT. Third-party content and copyright remain with their authors. Refer to the original license and terms.
Original license ↗Synchronization, copying and user-reported success do not mark a resource as runtime-tested.
Limitations and notes
- Collecting metadata does not mean this site has installed, adapted, runtime-tested or security-reviewed the resource.