Security Payloads

A curated subset of SecLists focused on exploitation payloads for security testing. You get EICAR test files for AV validation, null byte and command execution filename exploits for testing upload filters, and path traversal payloads. It's stripped down from the full 4.5GB SecLists repo to just the essentials you'd need for testing file handling and security controls. The usual warnings apply: authorized testing only, bug bounties within scope, your own systems, etc. If you're doing pentesting or running CTF challenges and need quick access to proven payloads without cloning the entire SecLists collection, this gets you the core exploitation vectors in a ready-to-use format.

skills.sh installs: 606
GitHub stars: 400
last updated: Jun 8, 2026

View on GitHub

Install

$ npx -y skills add eyadkelleh/awesome-skills-security --skill security-payloads --agent claude-code

Installs into .claude/skills of the current project.

Files

SecLists Payloads (Curated)

Description

Essential exploitation payloads: anti-virus test files, file name exploits, malicious files. Curated for testing.

Source: SecLists/Payloads Repository: https://github.com/danielmiessler/SecLists License: MIT

When to Use This Skill

Use this skill when you need:

Anti-virus testing
File upload testing
Path traversal testing
Security control validation

⚠️ IMPORTANT: Only use for authorized security testing, bug bounty programs, CTF competitions, or educational purposes.

Key Files in This Skill

EICAR test file
Null byte file names
Command execution file names

Usage Example

# Access files from this skill
import os

# Example: Load patterns/payloads
skill_path = "references/Payloads"

SKILL.md on GitHub

Details

Repository: github.com/eyadkelleh/awesome-skills-security
Categories: Testing & QA, Security
First seen: Jun 11, 2026

More from eyadkelleh/awesome-skills-security

All 7