Automate detection and mitigation of DOM-based client-side vulnerabilities in web applications.
npx skills add https://github.com/Skobyn/talon --skill hunt-dom
Please help me install this Agent Skill. Skill: hunt-dom Source: https://github.com/Skobyn/talon/tree/main/skills/hunt-dom Command: npx skills add https://github.com/Skobyn/talon --skill hunt-dom
This Skill unit is designed to detect and mitigate DOM-based client-side vulnerabilities, such as DOM Clobbering, PostMessage Hijacking, Service Worker Abuse, CSS Injection/Exfiltration, and Client-Side Template Injection, providing a robust solution for securing web applications.
Run the hunt-dom skill to begin scanning for DOM-based vulnerabilities in your web application.
High-intent search queries and answers about installing and using this skill.
To detect DOM-based XSS vulnerabilities, this Skill automates scanning for client-side attack vectors like DOM Clobbering and Client-Side Template Injection where JavaScript globals are overwritten via HTML injection. It identifies specific DOM vulnerabilities across web applications to ensure browser security.
PostMessage hijacking occurs when cross-origin data is trusted without proper origin checks. This Skill identifies these client-side security issues by automating the detection of vulnerable postMessage implementations across your web application's browser security boundaries.
You can find Service Worker abuse and CSS injection vulnerabilities by running an automated scan. This Skill discovers the misuse of Service Workers for intercepting requests and credentials, and finds CSS vulnerabilities used to inject code or exfiltrate data from the DOM.
Yes, you need in-depth knowledge of JavaScript, HTML, and browser security to effectively use this Skill. It requires understanding client-side security mechanisms to accurately identify and mitigate advanced DOM-based vulnerabilities like DOM Clobbering and template injection.
The best way to mitigate client-side template injection is through automated identification of vulnerable template processing. This Skill scans your web application to precisely locate client-side template injection flaws and other DOM vulnerabilities, enabling targeted remediation.
zz8011Analyze browser performance data to detect regressions across pull requests.
bpnrockstarAutomate DOM XSS hunting and detection across browser vulnerabilities.
salmanabdurrahmanEnumerate and classify CORS policies and CSP directives across web endpoints.
vitoropereiraDetect stored, reflected, and DOM-based XSS and HTML injection vulnerabilities in web applications.
