skills.rest
sseshachala
sseshachalaCOMMUNITY
Explore all skills by this author →
GitHub

hunt-xss

Identify and validate reflected, stored, and DOM XSS vulnerabilities using a curated pattern library.

Updated Jun 5, 2026
Search Tags:#vulnerability#xss#web-security#payloads#chains#bug-bounty#hunting
One-click install
npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-xss-sseshachala
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: hunt-xss
Source: https://github.com/sseshachala/Claude-BugHunter-archive/tree/main/skills/hunt-xss
Command: npx skills add https://github.com/sseshachala/Claude-BugHunter-archive --skill hunt-xss-sseshachala

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

XSS hunting requires a structured approach to identify and chain cross-site scripting vulnerabilities across web targets, leveraging a curated pattern library derived from real-world bug bounty reports to guide testing.

Core Features & Use Cases

  • Pattern-driven detection for reflected, stored, and DOM XSS across web apps, wikis, and collaboration portals.
  • Chain-focused methodologies that map XSS into higher-impact outcomes like cookie theft, privilege escalation, or ATO.
  • Comprehensive payload catalog including common reflection points, sanitization bypasses, and CSP considerations, drawn from 174 public reports.

Quick Start

Identify potential XSS surfaces on a target by applying the payload patterns and workflow described in this skill.

Frequently Asked Questions about hunt-xss

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I identify and chain XSS vulnerabilities across web applications?▼

Chaining XSS vulnerabilities involves mapping cross-site scripting flaws into higher-impact outcomes like cookie theft, privilege escalation, or account takeover using methodologies derived from real-world bug bounty reports.

Can I use this pattern-driven approach for testing collaboration portals and wikis?▼

The workflow requires awareness of payload types, reflection points, sanitization bypasses, and CSP considerations to successfully discover and validate cross-site scripting vulnerabilities across these platforms.

What is the best way to bypass Content Security Policy when hunting for XSS?▼

This approach leverages a comprehensive payload catalog derived from 174 public bug bounty reports to identify valid reflection points and execute successful cross-site scripting chains.

Does this XSS hunting workflow cover DOM-based vulnerabilities?▼

It applies a curated pattern library to identify and validate DOM XSS by analyzing reflection points and sanitizer behaviors across various web applications and collaboration portals.

What payload patterns are available for finding cross-site scripting reflection points?▼

These patterns enable structured detection of reflected, stored, and DOM-based cross-site scripting vulnerabilities across diverse web targets like admin panels and wikis.

Related Skills

Explore More Education & Research Skills→
igbuendigbuend
8

attack-surface-xss

Map XSS attack surface by analyzing security headers, frameworks, and DOM patterns.

Community
Advanced
zebbernzebbern
34

Cross-Site Scripting and HTML Injection Testing

Detect, exploit, and bypass filters for Cross-Site Scripting and HTML injection vulnerabilities in web applications.

Community
Advanced
woohyun212woohyun212
21

web-vuln-cache-poisoning

Detect web cache poisoning and deception in cached HTTP responses.

Community
Intermediate
vitoropereiravitoropereira

Cross-Site Scripting and HTML Injection Testing

Detect stored, reflected, and DOM-based XSS and HTML injection vulnerabilities in web applications.

Community
Advanced