skills.rest
AndyAnh174
AndyAnh174COMMUNITY
Explore all skills by this author →
WebsiteGitHub

Cross-Site Scripting and HTML Injection Testing

Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.

Updated Jan 8, 2026
Search Tags:#xss#penetration testing#web security#vulnerability testing#payloads#html injection
One-click install
npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill cross-site-scripting-and-html-injection-testing-andyanh174
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: Cross-Site Scripting and HTML Injection Testing
Source: https://github.com/AndyAnh174/BanThuoc-SEO/tree/main/.agent/skills/xss-html-injection
Command: npx skills add https://github.com/AndyAnh174/BanThuoc-SEO --skill cross-site-scripting-and-html-injection-testing-andyanh174

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This Skill addresses the critical need to identify and demonstrate Cross-Site Scripting (XSS) and HTML Injection vulnerabilities in web applications, protecting against session hijacking and data breaches.

Core Features & Use Cases

  • Vulnerability Detection: Systematically identifies input reflection points and tests for XSS/HTMLi flaws across stored, reflected, and DOM-based vectors.
  • Exploitation Techniques: Provides payloads for cookie stealing, session hijacking, and phishing.
  • Filter Bypass: Offers methods to circumvent common security filters and WAFs.
  • Use Case: A security analyst can use this skill to thoroughly test a web application's user-submitted content fields for vulnerabilities before deployment, ensuring robust security.

Quick Start

Use the xss-html-injection skill to test the search functionality of 'https://example.com' for reflected XSS vulnerabilities.

Frequently Asked Questions about Cross-Site Scripting and HTML Injection Testing

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I test web applications for reflected and stored XSS vulnerabilities?▼

This Skill detects XSS vulnerabilities by systematically identifying input reflection points and testing stored, reflected, and DOM-based vectors to prevent session hijacking and data breaches.

What is the best way to bypass WAF filters during HTML injection testing?▼

The best way to bypass WAF filters during HTML injection testing is to use specific payload variations designed to circumvent common security filters, allowing successful exploitation of user-submitted content fields.

Can I use this to generate payloads for cookie stealing and phishing simulations?▼

Yes, it provides specific exploitation techniques and payloads for cookie stealing, session hijacking, and phishing to demonstrate client-side injection attack vectors.

Does this cover DOM-based Cross-Site Scripting assessment end to end?▼

Yes, it performs comprehensive client-side injection vulnerability assessments covering DOM-based XSS, including filter bypass techniques and actionable remediation advice for web applications.

How do I identify input reflection points for HTML injection flaws?▼

You identify input reflection points by performing comprehensive vulnerability assessments that systematically test user-submitted content fields for HTML injection flaws across multiple attack vectors.

Related Skills

Explore More Software Engineering Skills→
cmndcntrlcybercmndcntrlcyber
3

hunt-http-smuggling

Detect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.

Community
Advanced
SoborboSoborbo
4

competitor-analysis

Analyze up to five competitor websites to extract marketing data into YAML.

Community
Basic
AJBcodingAJBcoding
4

moai-security-ssrf

Validate and filter URLs to protect web requests from SSRF.

Community
Advanced
zebbernzebbern
4.5k

Red Team Tools and Methodology

Automate red-team reconnaissance and vulnerability discovery workflows.

Community
Advanced