csp-bypass-advanced

What problem does it solve?

CSP policies are often misconfigured or brittle, leaving apps vulnerable to bypasses and data exfiltration. This skill helps security practitioners identify weaknesses and exfiltration paths that CSP may fail to block.

Core Features & Use Cases

• Analyze CSP policies to detect missing directives such as base-uri, form-action, frame-ancestors.
• Map and reason about bypass vectors across script-src, nonce, strict-dynamic, and framework integrations (Angular/Vue) to assess risk.
• Provide actionable guidance to mitigate weaknesses and implement stronger CSP controls in real-world web apps.

Quick Start

Run an assessment of a target page's CSP to identify missing directives and test common bypass vectors.