A web application security testing guide based on the OWASP Top 10, a widely used list of common web security risks.

Use it for authorized testing of websites and APIs, including checking permissions, sessions and tokens, encryption, SQL and command injection, business rules, security settings, and vulnerable dependencies.

It provides a structured way to look for weaknesses such as access-control errors, unsafe data handling, injection attacks, and insecure settings.

pentest-web — Command for coding agents by JoasASantos: A web application security testing guide based on the…

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

agentmods

npx agentmods add commands/joasasantos/claudeadvancedplugins/pentest-web

Clone the repo

git clone --depth 1 https://github.com/JoasASantos/ClaudeAdvancedPlugins

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

README.md

[![agentmods](https://agentmods.dev/badge/commands/joasasantos/claudeadvancedplugins/pentest-web.svg)](https://agentmods.dev/commands/joasasantos/claudeadvancedplugins/pentest-web)

Your own site

<a href="https://agentmods.dev/commands/joasasantos/claudeadvancedplugins/pentest-web"><img src="https://agentmods.dev/badge/commands/joasasantos/claudeadvancedplugins/pentest-web.svg" alt="Measured on agentmods" height="20"></a>

Per session 0 Only the description is in the session, so the agent can decide to use it. The body loads when it is invoked.

When invoked 497 The whole file, excluding the scripts and references it only reads on demand.

Security scan A 0 findings. Scan, not verified.

Origin original No closer match found in the catalogue.

Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

Model	Per session	Once invoked
Fable 5	$0.00000	$0.00497
Opus 5	$0.00000	$0.00249
Sonnet 5	$0.00000	$0.00099
Haiku 4.5	$0.00000	$0.00050

Measured 4d ago against content hash 5962d7fe2607, method: parsed. Prices are Anthropic first-party input rates as of 2026-08-30, from the pricing page.

Security

Grade A, and why

pentest-web scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 4d ago.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

plugins/pentest-toolkit/commands/pentest-web.md · 86 lines

How it starts

The opening of the file, as written. The whole thing — 86 lines — stays where its author put it; the contents beside it link to each section on GitHub.

Web Application Penetration Testing

Expert web application security testing following OWASP methodology.

Testing Categories (OWASP Top 10 2021 + Beyond)

A01: Broken Access Control

IDOR (Insecure Direct Object References)
Privilege escalation (horizontal/vertical)
JWT/session token manipulation
CORS misconfiguration
Directory traversal
Force browsing

A02: Cryptographic Failures

TLS configuration analysis
Weak cipher suites
Sensitive data exposure in transit/at rest
Insecure random number generation
Certificate validation bypass

A03: Injection

SQL injection (Union, Blind, Time-based, Error-based, OOB)
NoSQL injection (MongoDB, CouchDB)
LDAP injection
OS command injection
Template injection (SSTI)
Expression Language injection
Header injection (CRLF, Host)

A04: Insecure Design

Business logic flaws
Race conditions (TOCTOU)
Mass assignment
API abuse scenarios
Workflow bypass

A05: Security Misconfiguration

Default credentials
Unnecessary features enabled
Missing security headers
Verbose error messages
Directory listing
Outdated software

A06: Vulnerable Components

Dependency vulnerability scanning
Known CVE exploitation
Supply chain analysis

A07: Authentication Failures

Brute force protection testing
Password policy evaluation
MFA bypass techniques
Session management flaws
OAuth/OIDC misconfigurations
Password reset poisoning

A08: Data Integrity Failures

Deserialization vulnerabilities (Java, PHP, Python, .NET)
CI/CD pipeline security
Unsigned updates

A09: Logging & Monitoring Gaps

Log injection
Insufficient logging assessment
Alert bypass

A10: SSRF

Internal service access
Cloud metadata endpoints
Protocol smuggling
DNS rebinding

Beyond OWASP Top 10

WebSocket security
GraphQL-specific attacks (introspection, batching, DoS)
API-specific vulnerabilities
Client-side attacks (XSS, DOM clobbering, prototype pollution)
File upload vulnerabilities
XXE (XML External Entity)

Read the full file on GitHub · 86 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

4d ago First seen · 86 lines · 0 tokens per session scan A 5962d7fe2607

Subscribe to this mod's changes

pentest-web is a command published in the GitHub repository JoasASantos/ClaudeAdvancedPlugins (154 stars, last pushed 6mo ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 497 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.