hunt-xss

The skill detects cross-site scripting vulnerabilities by analyzing URL patterns, response headers, and JavaScript code to identify reflective, stored, and DOM-based XSS flaws. It evaluates web application inputs and execution sinks to uncover potential script injection points.

Reflective, stored, and DOM-based XSS represent different cross-site scripting attack vectors. The skill distinguishes them by analyzing URL parameters for reflective flaws, persistent data inputs for stored XSS, and client-side JavaScript execution sinks for DOM-based vulnerabilities.

Yes, the skill evaluates CSP bypass techniques and sanitizer bypasses. It identifies filter evasion methods and defense signal weaknesses to test the robustness of existing Content Security Policy configurations and input sanitization implementations against XSS.

The analysis works directly with client-side JavaScript patterns to identify DOM-based XSS vulnerabilities. It examines how scripts process URL parameters and DOM inputs, detecting unsafe client-side execution sinks where malicious script injection could occur.

The skill analyzes response headers including Content Security Policy configurations to identify cross-site scripting vulnerabilities. It examines security headers to detect missing or weak defensive directives that permit malicious script execution within the web application.

To mitigate cross-site scripting vulnerabilities after detection, apply the recommended strategies provided by the skill. It suggests specific CSP bypass countermeasures, sanitizer improvements, and filter evasion defenses to secure reflective, stored, and DOM-based XSS flaws.