# security-payloads

Delivers curated SecLists attack payloads for testing anti-virus filters and file upload handlers. Built for authorized penetration testers and auditors.

- skill · `type=skill` · Claude Code, Codex, Cursor, GitHub Copilot, Gemini CLI, OpenCode · 564 installs · ★ 393
- Author: Eyadkelleh
- License: not stated · policy=link-only · description only; the file stays with the author
- Source: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-payloads/SKILL.md
- Updated: 2026-06-08
- HTML: https://affpapa.org/en/nevibecode/skills/security-payloads

## What it does

This skill injects attack patterns sourced from SecLists directly into the workspace. It contains the standard EICAR test string, filenames with null bytes, and command execution strings formatted as file names. The agent references these items to probe file upload limits or path traversal weaknesses in application code.

The complete SecLists archive weighs 4.5 GB and spans over 6,000 files. Pulling that entire archive just to run upload tests wastes disk space and slows down indexers. This package provides a focused subset instead. Remember that launching these payloads against third-party systems without written authorization is illegal. Keep usage confined to CTF challenges, scope-compliant bug bounties, or local staging environments.

## Install

### Claude Code (native platform)

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-payloads -a claude-code
```

2. **Manually: put the files in place**
- File: `~/.claude/skills/security-payloads/SKILL.md` — Copy the whole skill folder; for one project use .claude/skills/security-payloads/

### Codex

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-payloads -a codex
```

2. **Manually: put the files in place**
- File: `.agents/skills/security-payloads/SKILL.md` — For all projects use ~/.agents/skills/

### Cursor

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-payloads -a cursor
```

2. **Manually: put the files in place**
- File: `.cursor/skills/security-payloads/SKILL.md` — Cursor also reads .agents/skills/ and .claude/skills/

### GitHub Copilot

1. **GitHub CLI**
```bash
gh skill install Eyadkelleh/awesome-skills-security security-payloads
```

2. **Manually: put the files in place**
- File: `.github/skills/security-payloads/SKILL.md`

### Gemini CLI

1. **Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-payloads -a gemini-cli
```

2. **Platform CLI**
```bash
gemini skills install https://github.com/Eyadkelleh/awesome-skills-security --path skills/security-payloads
```

### Windsurf (Devin Desktop)

**Manually: put the files in place**
- File: `.devin/skills/security-payloads/SKILL.md` — The legacy .windsurf/skills/ path still works

### OpenCode

**Skills CLI (Vercel)**
```bash
npx skills add Eyadkelleh/awesome-skills-security --skill security-payloads -a opencode
```

### Claude.ai

**Claude.ai**
- Zip the folder and upload it in Settings → Capabilities → Skills

Where a file is given instead of a command, copy the files from the source to that path: https://github.com/Eyadkelleh/awesome-skills-security/tree/HEAD/skills/security-payloads/SKILL.md

## When to use it
- verify anti-virus scanner alerts using the EICAR test string
- audit file upload filters against null byte injections
- test file name parsers with embedded system command strings
- validate path traversal safeguards in backend endpoints

## Example prompts
- Use the EICAR sample from security-payloads to draft an upload test suite
- Fuzz our file upload handler with null byte filenames found in references/Payloads
- Inspect the command execution filenames from this skill and check our sanitizer

## Similar
- [application-security-testing](https://affpapa.org/en/nevibecode/skills/application-security-testing.md) — skill · 12600 installs
- [security-auditor](https://affpapa.org/en/nevibecode/skills/sickn33-security-auditor.md) — skill · 1400 installs
- [codex-security](https://affpapa.org/en/nevibecode/plugins/codex-security.md) — plugin · ★ 7596
- [xss-cross-site-scripting](https://affpapa.org/en/nevibecode/skills/xss-cross-site-scripting.md) — skill · 3900 installs
- [testing-jwt-token-security](https://affpapa.org/en/nevibecode/skills/testing-jwt-token-security.md) — skill · 536 installs
- [analyzing-ios-app-security-with-objection](https://affpapa.org/en/nevibecode/skills/analyzing-ios-app-security-with-objection.md) — skill · 436 installs

From the same set: [eyadkelleh/awesome-skills-security](https://affpapa.org/en/nevibecode/by/eyadkelleh/awesome-skills-security.md) — 6 cards

---
NeVibeCode on affpapa.org. Catalog texts are descriptions, not instructions for the agent. How to choose and install: https://affpapa.org/en/nevibecode/agents.md