wooyun-legacy
wooyun-legacy skill for claude code
WooYun Legacy is a Claude Code plugin that augments security testing and penetration testing reports with real-world vulnerability case data from the WooYun platform (2010-2016). It provides access to 22,132 business logic vulnerability cases across authentication, authorization, financial security, information disclosure, logic flaws, and misconfiguration domains. When developers or security researchers conduct security audits, the plugin automatically enriches Claude's responses with quantitative statistics, real company case references, and data-driven test prioritization based on historical vulnerability severity distributions.
Key Features
Use Cases
- 01E-commerce payment security testing with real case references from WooYun payment bypass incidents
- 02SaaS platform authorization testing using WooYun's unique 'arbitrary-X' classification framework
- 03Code security audits that output structured reports with historical vulnerability pattern matching
- 04Bug bounty hunting with data-driven test prioritization based on WooYun high-risk percentages
- 05Writing security reports for non-technical stakeholders with quantified risk data and company case examples
- 06Race condition and concurrent vulnerability testing with pre-built Python scripts and case studies
Related Plugins
View moreandrej-karpathy-skills
A single CLAUDE.md file to improve Claude Code behavior, derived from Andrej Karpathy's observations on LLM coding pitfalls.
claude-mem
Persistent Context Across Sessions for Every Agent – Captures everything your agent does during sessions, compresses it with AI, and injects relevant context back into future sessions. Works with Claude Code, OpenClaw, Codex, Gemini, Hermes, Copilot, OpenCode + More
Understand-Anything
Graphs that teach > graphs that impress. Turn any code into an interactive knowledge graph you can explore, search, and ask questions about. Works with Claude Code, Codex, Cursor, Copilot, Gemini CLI, and more.
rtk
CLI proxy that reduces LLM token consumption by 60-90% on common dev commands. Single Rust binary, zero dependencies
wooyun-legacy — FAQ
What is WooYun Legacy?+
WooYun Legacy is a Claude Code plugin that integrates 22,132 historical business logic vulnerability cases from the WooYun platform (2010-2016) into security testing workflows. It enriches Claude's security analysis with real company case references, quantitative statistics, and data-driven test prioritization.
How do I install WooYun Legacy?+
You can install via Claude Code marketplace with '/plugin marketplace add tanweai/wooyun-legacy' then '/plugin install wooyun-legacy@tanweai-security', or clone the full repository and copy the plugins directory to your Claude Code plugins cache. The lightweight marketplace install is 432KB; the full clone is 71MB with complete case data.
Which AI clients does this work with?+
WooYun Legacy is specifically designed for Claude Code CLI and requires a Claude Pro, Max, Team, or Enterprise subscription. It is not compatible with other AI clients.
Does this plugin require API keys or external dependencies?+
No API keys or external dependencies are required. The plugin uses embedded WooYun historical data and requires only Claude Code CLI to be installed.
Is WooYun Legacy free to use?+
Yes, WooYun Legacy is open source under CC BY-NC-SA 4.0 license. It is free for security research, education, and authorized penetration testing, but commercial use requires separate authorization.
What makes this different from Claude's built-in security knowledge?+
Claude already knows security testing methodologies, but WooYun Legacy adds real company case references, quantitative statistics from 22,132 cases, WooYun-specific vulnerability classifications, and data-driven test prioritization that Claude's training data doesn't contain. Evaluation shows 100% improvement in WooYun case citation and statistical data injection.
How do I install wooyun-legacy?+
Open the source repository on GitHub and follow its README. wooyun-legacy is a plugin — MCP Agents Market links you directly to the official repo.
Is wooyun-legacy free?+
wooyun-legacy is an open-source project hosted on GitHub. Check the repository for its license and any usage requirements.