Analyze Cross-site Scripting vulnerabilities, attack vectors, and bypass techniques.
npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-xss
Please help me install this Agent Skill. Skill: Strix•XSS 测试 Source: https://github.com/asdfgh1445/ctf-super-hub/tree/main/strix-xss Command: npx skills add https://github.com/asdfgh1445/ctf-super-hub --skill strix-xss
This Skill provides detailed guidance on detecting, understanding, and bypassing Cross-site Scripting vulnerabilities across multiple contexts, helping security professionals identify potential XSS issues thoroughly.
Provide a URL parameter or user input example, then analyze how injection could occur and suggest bypass payloads.
High-intent search queries and answers about installing and using this skill.
XSS vulnerability testing involves analyzing reflected, stored, and DOM-based vectors across server-rendered templates and client-side dynamic content. You must evaluate injection points and contextual encoding to identify potential bypass opportunities systematically.
Reflected XSS executes from immediate user input, stored XSS persists in server databases, and DOM-based XSS executes entirely client-side. Analyzing these distinct attack vectors helps identify how injection points operate within various client-server rendering contexts.
Bypassing CSP and Trusted Types requires evaluating cross-context payloads against client/server rendering logic. Analyzing specific injection points allows you to craft targeted bypass techniques that circumvent these web security policies during vulnerability testing.
XSS vulnerability testing applies across web, mobile, and desktop applications. The assessment systematically covers various frameworks and content types, analyzing client-server rendering and security policies to identify injection points regardless of the platform.
Analyzing cross-context payloads requires providing a URL parameter or user input example to determine how injection could occur. You then evaluate the client-side dynamic content and server-rendered templates to suggest appropriate bypass payloads.
rahmatullahbossTest web input points with crafted HTML payloads for unescaped rendering.
sugarforeverScan Python projects for security vulnerabilities and dependency issues.
Chid0kDetect Cross-Site Scripting vulnerabilities in web applications using Playwright and Burp.
AnsteorraPerform static and dynamic security audits on the KMP application.
