Cross-Site Scripting and HTML Injection Testing

What problem does it solve?

This Skill addresses the critical need to identify and demonstrate Cross-Site Scripting (XSS) and HTML Injection vulnerabilities in web applications, protecting against session hijacking and data breaches.

Core Features & Use Cases

• Vulnerability Detection: Systematically identifies input reflection points and tests for XSS/HTMLi flaws across stored, reflected, and DOM-based vectors.
• Exploitation Techniques: Provides payloads for cookie stealing, session hijacking, and phishing.
• Filter Bypass: Offers methods to circumvent common security filters and WAFs.
• Use Case: A security analyst can use this skill to thoroughly test a web application's user-submitted content fields for vulnerabilities before deployment, ensuring robust security.

Quick Start

Use the xss-html-injection skill to test the search functionality of 'https://example.com' for reflected XSS vulnerabilities.