pentest-vuln-verify-test

Send raw HTTP requests to verify open redirects and XSS vulnerabilities.

299|56|Updated Jan 13, 2026
One-click install
npx skills add https://github.com/jd-opensource/JoySafeter --skill pentest-vuln-verify-test
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: pentest-vuln-verify-test
Source: https://github.com/jd-opensource/JoySafeter/tree/main/skills/pentest-vuln-verify
Command: npx skills add https://github.com/jd-opensource/JoySafeter --skill pentest-vuln-verify-test

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

This skill automates the verification of web vulnerabilities by sending crafted HTTP requests and evaluating responses for open redirects and XSS, reducing manual testing steps and risk.

Core Features & Use Cases

  • Raw HTTP request parsing and reconstruction
  • Cookie/session context switching for validation
  • Automated payload delivery and response pattern matching
  • Reference workflows and trust checks

Quick Start

Run verify.sh against your target URL with optional cookies and a user-agent to verify open redirects and XSS.

Frequently Asked Questions about pentest-vuln-verify-test

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate web vulnerability verification for open redirects and XSS?

Automate web vulnerability verification by crafting and sending raw HTTP requests to validate open redirects and XSS. The skill parses raw HTTP requests, manipulates cookie/session contexts, delivers payloads, and matches response patterns against strict success criteria.

Can I send raw HTTP requests with custom cookies to test for XSS?

Yes, you can send raw HTTP requests with custom cookies to test for XSS. The skill supports raw HTTP request parsing, reconstruction, and cookie/session context switching to validate vulnerabilities under specific user contexts.

Does this vulnerability verification tool work for red-team activities and compliance assessments?

Yes, this vulnerability verification tool works for red-team activities and compliance assessments. It applies deterministic request manipulation and strict success criteria matching required for validating open redirects and XSS in security testing.

What is the best way to validate open redirect vulnerabilities automatically?

The best way to validate open redirect vulnerabilities automatically is by crafting targeted raw HTTP requests and evaluating server responses. This skill automates payload delivery and applies strict response-pattern matching to confirm the redirect behavior.

How do I match HTTP response patterns to confirm a vulnerability during security testing?

Match HTTP response patterns to confirm a vulnerability by defining strict success criteria and automating the evaluation of server responses. The skill handles response-pattern matching against these criteria after delivering crafted HTTP requests.

Do I need to manually reconstruct HTTP requests to verify an open redirect?

No, you do not need to manually reconstruct HTTP requests to verify an open redirect. The skill automates raw HTTP request parsing and reconstruction, allowing you to run verification scripts against a target URL with optional cookies.