Detect reflected, stored, and DOM XSS vulnerabilities with OOB confirmation.
npx skills add https://github.com/jellaharshith/SWIFT --skill hunt-xss-jellaharshith
Please help me install this Agent Skill. Skill: hunt-xss Source: https://github.com/jellaharshith/SWIFT/tree/main/swift/skills/cbh/skills/hunt-xss Command: npx skills add https://github.com/jellaharshith/SWIFT --skill hunt-xss-jellaharshith
Hunting cross-site scripting (XSS) vulnerabilities is error-prone because reflections, sanitization behavior, and DOM execution contexts can look convincing without actually enabling real JavaScript execution and impact.
Use the hunt-xss skill to plan a context-aware XSS hunt for your target by mapping reflection points, choosing appropriate payload delivery for reflected/stored/DOM cases, and running the blind/stored OOB validation gate.
High-intent search queries and answers about installing and using this skill.
Validating blind XSS in admin panels requires out-of-band confirmation gates using collaborator beacons that fire when payloads execute in a real browser, ensuring payload delivery is confirmed rather than assumed from reflection alone.
Validating blind XSS in admin panels requires out-of-band confirmation gates using collaborator beacons that fire when payloads execute in a real browser, ensuring payload delivery is confirmed rather than assumed from reflection alone.
Testing sanitizer bypasses for SVG injection and stored XSS involves using canary markers to test sanitizer behavior, exploring rendering surfaces, and validating common XSS bypass patterns against high-impact targets like file upload endpoints.
Preventing false positives during DOM-based XSS hunting requires marker discipline and context-specific payload testing, enforcing browser-based or OOB confirmation to verify that reflections actually enable real JavaScript execution.
XSS hunting works for redirect and UTM parameter injection by systematically probing these reflection points, testing context-specific payloads, and validating execution against common bypass primitives to confirm exploitable vulnerabilities.
You should focus XSS hunting on auth flows and payment-financial targets when prioritizing high-impact vulnerabilities, as these surfaces typically yield the greatest impact when stored-rendering or admin panel XSS payloads execute successfully.
roderikAnalyze API surfaces and configuration schemas to detect misuse-prone designs.
riparinoDetect and document cross-site scripting vulnerabilities across stored, reflected, DOM-based, and blind contexts.
giosuetedeschi-specIdentify and validate HTML injection vulnerabilities in web application inputs.
AndyAnh174Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.
