Detect and validate reflected, stored, and DOM-based XSS vulnerabilities on web targets.
npx skills add https://github.com/hhjkjkjk/Claude-skills --skill hunt-xss-hhjkjkjk
Please help me install this Agent Skill. Skill: hunt-xss Source: https://github.com/hhjkjkjk/Claude-skills/tree/main/skills/hunt-xss Command: npx skills add https://github.com/hhjkjkjk/Claude-skills --skill hunt-xss-hhjkjkjk
High-intent search queries and answers about installing and using this skill.
Map every reflection point by spidering the target, then classify each as reflected, stored, or DOM-based. Probe with a unique random canary string to see which characters are escaped, then apply context-appropriate payloads for HTML, attribute, or JavaScript sinks.
Plant out-of-band beacons using a unique Collaborator subdomain in fields viewed later by admins, such as error messages, User-Agent headers, or login usernames. A callback from a browser User-Agent to your listener confirms execution; encoded output in the response does not.
Yes. SVG files can contain script tags, and Content-Security-Policy often applies to HTML responses but not to image/svg+xml responses. If the SVG is served same-origin, the executing JavaScript gains full session cookie and API access.
If your payload appears HTML-encoded (like <script>) or URL-encoded inside an attribute, the output is correctly escaped and it is not XSS. Verify with a unique marker that the reflection is unencoded and test in a real browser, since Burp results can differ from Chrome.
Reports fail when the canary appears naturally in the page, the payload only fires in the attacker's own session (self-XSS), or no concrete impact is demonstrated. Show what the attacker can do, what the victim loses, and provide a PoC reproducible in a current browser within 10 minutes.
pdparchitectAutomate subdomain enumeration and active service discovery for web attack surfaces.
SnailSploitTest OAuth 2.0 and OIDC implementations for redirect_uri bypass and token leakage.
wgpsecExploit confirmed HTTP request smuggling vulnerabilities through chained attacks and HTTP/2 downgrade techniques.
cmndcntrlcyberIdentify and exploit reflective, stored, and DOM-based XSS vulnerabilities in web applications.
