Detect and validate reflected, stored, and DOM-based XSS vulnerabilities.
npx skills add https://github.com/AKasem1/claude-bug-bounty --skill hunt-xss
Please help me install this Agent Skill. Skill: hunt-xss Source: https://github.com/AKasem1/claude-bug-bounty/tree/main/skills/hunt-xss Command: npx skills add https://github.com/AKasem1/claude-bug-bounty --skill hunt-xss
Hunting cross-site scripting (XSS) vulnerabilities wastes time on false positives and weak validation, especially for reflected, stored, and DOM-based cases where impact depends on where the payload executes.
Run the hunt on a new target by using a browser-safe XSS canary first, map reflection points, then validate the highest-value sinks with collaborator-based confirmation where needed.
High-intent search queries and answers about installing and using this skill.
XSS payload testing for admin interfaces requires mapping reflection points with browser-safe canaries and applying context-appropriate payloads. You must match payloads to specific HTML, attribute, JavaScript, or URL execution contexts to bypass sanitizers effectively.
The best way to confirm blind stored XSS is using out-of-band collaborator-based proof requirements. Treat non-confirmation cases strictly, ensuring that payload execution in high-value surfaces like admin panels is verified through reliable interaction callbacks.
To bypass CSP and sanitizers during XSS hunting, apply context-appropriate payload strategies including SVG and math/style mXSS techniques. Match these payloads to the exact HTML, attribute, or JS context where reflection occurs to achieve successful execution.
Yes, you can test redirect and UTM parameters for XSS by mapping common DOM sinks and URL patterns. The hunting process includes specific redirect and UTM testing methodologies, along with cache-poisoning considerations for cached pages.
You should chain XSS with cache poisoning, CSRF exploitation, or HTTP request smuggling when planning higher-impact reports. Targeting crown-jewel surfaces like financial pages and SSO flows maximizes vulnerability severity and bug bounty payouts.
elementalsoulsMap XSS surfaces across web applications for safe testing and remediation.
blacklanternsecurityDetect and exploit HTTP request smuggling vulnerabilities using Burp Suite or smuggler.py.
roderikAnalyze API surfaces and configuration schemas to detect misuse-prone designs.
sseshachalaIdentify and validate reflected, stored, and DOM XSS vulnerabilities using a curated pattern library.
