hunt-dom
CommunityIdentify and mitigate DOM-based client-side vulnerabilities with precision.
Software Engineering#XSS#web application security#injection attacks#client-side security#DOM vulnerabilities
AuthorSkobyn
Version1.0.0
Installs0
System Documentation
What problem does it solve?
This Skill unit is designed to detect and mitigate DOM-based client-side vulnerabilities, such as DOM Clobbering, PostMessage Hijacking, Service Worker Abuse, CSS Injection/Exfiltration, and Client-Side Template Injection, providing a robust solution for securing web applications.
Core Features & Use Cases
- DOM Clobbering: Detects vulnerabilities where JavaScript globals are overwritten via HTML injection.
- PostMessage Hijacking: Identifies issues where cross-origin data is trusted without proper origin checks.
- Service Worker Abuse: Discovers the misuse of Service Workers for intercepting requests and credentials.
- CSS Injection/Exfiltration: Finds vulnerabilities where CSS can be used to inject code or exfiltrate data.
- Client-Side Template Injection: Identifies vulnerabilities in client-side template processing.
- Use Case: A web application is suspected of having DOM-based vulnerabilities. This Skill unit can be used to automate the detection and mitigation of these vulnerabilities, ensuring the application's security.
Quick Start
Run the hunt-dom skill to begin scanning for DOM-based vulnerabilities in your web application.
Dependency Matrix
Required Modules
None requiredComponents
scriptsreferences
💻 Claude Code Installation
Recommended: Let Claude install automatically. Simply copy and paste the text below to Claude Code.
Please help me install this Skill: Name: hunt-dom Download link: https://github.com/Skobyn/talon/archive/main.zip#hunt-dom Please download this .zip file, extract it, and install it in the .claude/skills/ directory.
Agent Skills Search Helper
Install a tiny helper to your Agent, search and equip skill from 620,000+ vetted skills library on demand.