tanweai/wooyun-legacy

Health v2 · maintenance only

Flags: no_releases no_license

Adoption not part of the score

1759 stars · 358 forks observed · 2026-08-28

What it is AI-extracted, prompt v1, taxonomy v1, 2026-08-30, confidence not recorded

A Claude Code plugin that injects real-world case citations, statistics, and data-driven prioritization into AI-generated security reports, based on 22,132 business logic vulnerability cases from the WooYun archive (2010-2016). It does not teach new penetration techniques but adds evidence and data ammunition to Claude's existing security testing capabilities.

Use cases

• write security reports backed by real vulnerability case citations
• prioritize business logic security tests with historical data
• research payment bypass and IDOR vulnerability patterns
• support SRC bug bounty reports with quantified statistics
• audit e-commerce payment flows for known failure modes
• build internal security review checklists from historical cases

When to choose

• you use Claude Code for security testing and want reports with real case evidence
• you need quantified severity statistics for business logic vulnerabilities
• you write penetration test reports for stakeholders who want data-backed claims

When to avoid

• you need coverage of modern tech stacks like cloud-native, GraphQL, or Serverless
• you want to learn new penetration testing techniques
• you need actively maintained software - the project is no longer maintained

Facets

plugin · maturity maintenance

security penetration-testing developer-tools security penetration-testing developer-tools cli cross-platform claude-code wooyun vulnerability-cases security-reports business-logic-vulnerabilities knowledge-base skill

Member repositories

For agents

markdown · JSON · MCP: product_card(name="tanweai/wooyun-legacy")