Identify and analyze stored and reflected XSS vulnerabilities in web applications.
npx skills add https://github.com/grivera82/pi-bughunter --skill hunt-xss-grivera82
Please help me install this Agent Skill. Skill: hunt-xss Source: https://github.com/grivera82/pi-bughunter/tree/main/skills/hunt-xss Command: npx skills add https://github.com/grivera82/pi-bughunter --skill hunt-xss-grivera82
Identify and analyze cross-site scripting vulnerabilities in web applications.
Launch hunt-xss in a controlled test target to enumerate XSS vectors and validate payload execution.
High-intent search queries and answers about installing and using this skill.
Identify XSS vulnerabilities by applying structured hunting patterns that map surface areas, test payload templates, and analyze execution contexts across reflected and stored inputs.
Stored XSS testing validates payload persistence in application databases, while reflected XSS testing injects payloads directly into URL parameters or form inputs to assess immediate browser execution.
Yes, payload templates support DOM-based XSS detection by targeting client-side JavaScript execution sinks, allowing testers to validate payload execution in specific privilege contexts.
Assess XSS impact by analyzing execution chains and privilege contexts, determining whether the payload can hijack user sessions, manipulate the DOM, or escalate authorization boundaries.
Structured XSS hunting works across public and internal web apps, applying systematic surface-area mapping and detection tips to enumerate vectors regardless of the deployment environment.
Sanitizer bypass techniques are required during bug bounty hunting to evade input validation filters, allowing payload patterns to reach vulnerable execution sinks and trigger successful XSS execution.
ricardoo022Identify configurations, secrets, and attack-surface exposure from JS-bundled web applications.
uphiagoIdentify and exploit XXE vulnerabilities across web applications and APIs.
blacklanternsecurityAnalyzes JavaScript flows to locate and exploit XSS vulnerabilities in web applications.
vitoropereiraDetect stored, reflected, and DOM-based XSS and HTML injection vulnerabilities in web applications.
