Skip to content

Add web-security skill: Comprehensive security testing toolkit#189

Closed
M0onc wants to merge 1 commit intoopenclaw:mainfrom
M0onc:main
Closed

Add web-security skill: Comprehensive security testing toolkit#189
M0onc wants to merge 1 commit intoopenclaw:mainfrom
M0onc:main

Conversation

@M0onc
Copy link

@M0onc M0onc commented Mar 12, 2026

🚀 New Skill: web-security

A comprehensive security testing toolkit covering web, cloud, containers, IoT, wireless, binary analysis, and malware analysis.

📊 Features (38 Tools)

Web Vulnerability Scanners (12)

  • SQL Injection, XSS, Command Injection
  • LFI/RFI, SSRF, XXE, SSTI
  • Deserialization, CORS, Open Redirect
  • API Security, Header Checker

Information Gathering (3)

  • Subdomain Scanner, Directory Scanner
  • Nmap Automation

Cloud Security (1)

  • AWS Security Scanner (S3, EC2, IAM, RDS)

Container Security (2)

  • Docker Security Scanner
  • Kubernetes Security Scanner

Binary & Reverse Engineering (3)

  • Binary Analyzer (PE/ELF)
  • Firmware Analyzer
  • Crypto Analyzer

Wireless & IoT (4)

  • WiFi Analyzer
  • BLE Scanner
  • RF Analyzer
  • Firmware Analyzer

Malware Analysis (2)

  • Malware Analyzer (static analysis)
  • YARA Scanner

Exploitation (2)

  • Exploit Framework (Log4j, Shellshock, Heartbleed, etc.)
  • Reverse Shell Generator

Utilities (8)

  • JWT Tool, Encoder, Hash Cracker
  • Wordlist Generator, PCAP Analyzer
  • Request Utilities

📦 Contents

  • 38 Python scripts
  • 2 Payload libraries (XSS, SQLi)
  • 4 Reference documents
  • All syntax validated ✅

🎯 Use Cases

  • Web penetration testing
  • CTF competitions
  • Security assessments
  • Vulnerability research
  • Malware analysis
  • IoT security testing

Ready for review! 🎉

…8 tools

Features:
- 12 Web vulnerability scanners (SQLi, XSS, LFI, SSRF, XXE, SSTI, CORS, etc.)
- 3 Information gathering tools
- AWS security scanner
- Docker and Kubernetes security scanners
- Binary analyzer, firmware analyzer, crypto analyzer
- WiFi, BLE, RF analyzers
- Malware analyzer and YARA scanner
- Exploit framework (Log4j, Shellshock, Heartbleed, etc.)
- 8 Utility tools
- 2 Payload libraries
- 4 Reference documents
@openclaw-barnacle
Copy link

Thanks for the pull request! This repository is read-only and is automatically synced from https://clawhub.ai, so we can’t accept changes here. Please make updates on the website instead.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant