dangling-markup-injection

What problem does it solve?

Dangling markup injection helps you steal sensitive page data even when classic XSS is blocked by CSP or sanitizers that remove script execution.

Core Features & Use Cases

• HTML injection exfiltration without JavaScript: Use unclosed tags to force the browser to load attacker-controlled URLs that include captured content.
• Context- and browser-aware vectors: Choose tag types and quote contexts to maximize what gets consumed and exfiltrated across Chrome/Firefox/Safari differences.
• Data targeting for real apps: Focus on CSRF tokens, pre-filled form values, session identifiers, and other secrets present after the injection point.
• Amplification and chaining: Pair with CSRF, open redirects, and cache deception to increase impact when needed.

Quick Start

Use the dangling-markup-injection skill to identify an HTML injection point on a page where secrets appear after it, then select a CSP-compliant dangling tag vector that forces the browser to send those secrets to a controlled endpoint.