cspt

What problem does it solve?

This Skill helps identify and exploit Client-Side Path Traversal (CSPT) vulnerabilities, where user input in JavaScript fetch/XHR requests can be manipulated to access unintended resources or redirect requests.

Core Features & Use Cases

• Identify CSPT Vulnerabilities: Detects JavaScript code where user input is unsafely concatenated into the path of fetch() or XHR requests.
• Exploit Path Traversal: Crafts payloads to traverse the URL path, potentially leading to open redirects, data exfiltration, or XSS.
• WAF Bypass Techniques: Provides strategies for evading Web Application Firewalls using various encoding methods.
• Use Case: You suspect a web application is vulnerable to CSPT. This Skill analyzes JavaScript to find vulnerable fetch calls and helps you craft a payload to redirect the request to an attacker-controlled server, demonstrating an open redirect vulnerability.

Quick Start

Analyze the provided JavaScript code for instances of user input being concatenated into fetch() or XHR request paths.