skills.rest
salmanabdurrahman
salmanabdurrahmanCOMMUNITY
Explore all skills by this author →
WebsiteGitHub

vuln-blind-xss

Validate Blind and Stored XSS via out-of-band callbacks.

Updated Jul 30, 2026
Search Tags:#security#vulnerability#xss#pentesting#canary#oob
One-click install
npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-blind-xss
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: vuln-blind-xss
Source: https://github.com/salmanabdurrahman/pi-pentest-agent/tree/main/skills/vuln-blind-xss
Command: npx skills add https://github.com/salmanabdurrahman/pi-pentest-agent --skill vuln-blind-xss

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill addresses the difficulty of validating Blind or Stored XSS vulnerabilities where payloads execute in unobserved, privileged contexts like admin panels or internal dashboards.

Core Features & Use Cases

  • OOB Validation: Uses out-of-band callback infrastructure to confirm execution without requiring immediate browser reflection.
  • Strict Safety Gates: Enforces authorization, scope validation, and data-minimization policies to prevent unauthorized data exfiltration.
  • Use Case: A security researcher needs to verify if a support ticket input field is vulnerable to XSS that might trigger when viewed by an administrator, using a controlled canary domain to detect the callback.

Quick Start

Use the vuln-blind-xss skill to initiate a validated blind XSS test against the target application after configuring your OOB listener and defining the injection surface.

Frequently Asked Questions about vuln-blind-xss

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I validate blind XSS vulnerabilities in admin panels where I cannot see the reflection?▼

You can validate blind XSS in unobserved admin panels by using out-of-band (OOB) callback infrastructure. This monitors for payload execution from privileged contexts like internal dashboards without requiring immediate browser reflection.

Can I test for stored XSS in internal log viewers without direct browser access?▼

Yes, testing stored XSS in internal log viewers is possible by injecting payloads that trigger OOB callbacks. This confirms execution in unobserved contexts by monitoring a controlled canary domain for incoming requests.

What is the best way to detect XSS in support ticket fields viewed only by administrators?▼

The best way to detect XSS in admin-viewed support ticket fields is through OOB validation. A controlled canary domain catches the callback when the payload executes in the administrator's privileged session.

How do I safely test blind XSS without risking unauthorized data exfiltration?▼

To safely test blind XSS, strict safety gates enforce authorization, scope validation, and data-minimization policies. This ensures ethical testing by preventing unauthorized data exfiltration during the vulnerability assessment.

What do I need to configure before starting an out-of-band XSS assessment?▼

Before starting an OOB XSS assessment, you must configure your OOB listener and define the specific injection surface. Strict adherence to scope and authorization policies is also required to ensure safe testing.

When should I use out-of-band callbacks instead of traditional XSS testing methods?▼

Use OOB callbacks for blind XSS testing when traditional reflection is absent. This applies to security assessments of privileged contexts like admin panels and internal dashboards where payload execution cannot be directly observed.

Related Skills

Explore More Software Engineering Skills→
woohyun212woohyun212
21

web-vuln-ssrf

Detects SSRF vulnerabilities in web applications using OOB callbacks and metadata probes.

Community
Advanced
salmanabdurrahmansalmanabdurrahman

vuln-command-injection

Validates OS command injection vulnerabilities using non-destructive time-based probes and OOB callbacks.

Community
Advanced
AcczdyAcczdy
2

performing-web-application-penetration-test

Automate web application penetration testing following the OWASP WSTG with Burp Suite.

Community
Advanced
AndyAnh174AndyAnh174

Cross-Site Scripting and HTML Injection Testing

Detect and exploit stored, reflected, and DOM-based XSS vulnerabilities.

Community
Advanced