web_vuln

Automate detection and exploitation of XSS, SSRF, LFI, SSTI, RCE, and XXE vulnerabilities in web applications.

Updated Aug 27, 2026
One-click install
npx skills add https://github.com/bingook/bingo --skill web-vuln
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: web_vuln
Source: https://github.com/bingook/bingo/tree/main/bingo/skills/web_vuln
Command: npx skills add https://github.com/bingook/bingo --skill web-vuln

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires httpx, requests, urllib.parse, and includes scripts (resource) components.

What problem does it solve?

This Skill provides a comprehensive set of tools to identify and exploit common web vulnerabilities, automating the process of discovering and attacking weaknesses in web applications.

Core Features & Use Cases

  • Vulnerability Detection: Identifies XSS, SSRF, LFI, SSTI, RCE, and XXE vulnerabilities in web applications.
  • Exploit Automation: Automates the exploitation of detected vulnerabilities for deeper security analysis.
  • Use Case: Imagine you are auditing a web application for potential security issues. This Skill can scan the application for vulnerabilities and provide exploit scripts to demonstrate potential weaknesses.

Quick Start

Use the web_vuln skill to scan the target URL for XSS vulnerabilities.

Frequently Asked Questions about web_vuln

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I automate XSS and SSRF vulnerability detection in web applications?

Automate XSS and SSRF vulnerability detection by running Python scripts that use httpx and requests to scan target URLs for exploitable weaknesses. This approach identifies and attacks common web application vulnerabilities automatically.

What web vulnerabilities can I identify and exploit using Python scripting?

You can identify and exploit XSS, SSRF, LFI, SSTI, RCE, and XXE web vulnerabilities using Python scripts. The automation covers detection and exploitation for comprehensive security auditing and red teaming scenarios.

Do I need Python web security knowledge to automate exploit detection?

Yes, automating exploit detection requires knowledge of Python scripting and web application security. This prerequisite knowledge is essential for configuring the scripts and interpreting the vulnerability exploitation results.

Can I use httpx and requests to scan for LFI and SSTI vulnerabilities?

Yes, you can use Python libraries httpx and requests to scan target URLs for LFI and SSTI vulnerabilities. The scripts leverage these dependencies to automate the identification and exploitation processes.

What is the best way to perform RCE and XXE exploit automation for security auditing?

The best way to perform RCE and XXE exploit automation is using Python scripts designed for security auditing. These scripts automate the exploitation of detected vulnerabilities to demonstrate potential web application weaknesses.