wooyun-legacy

Why we included this project

WooYun Legacy is a Claude Code plugin built on the WooYun disclosure archive: 22,132 business-logic vulnerability cases reported between 2010 and 2016, packaged into structured reference files. For security teams and bug-bounty researchers, that means Claude can back its findings with real company incidents, severity statistics, and a suggested order for which tests to run. The plugin adds no new attack techniques, just data ammunition for the ones Claude already knows. A lightweight marketplace install covers the methodology and statistics; cloning the full repo adds the complete case database, industry examples, and evaluation data. The project is no longer maintained and the archive predates cloud-native and GraphQL stacks, but the business-logic attack patterns it documents have stayed relevant.