Identify and analyze reflected, stored, and DOM-based XSS vulnerabilities in web applications.
npx skills add https://github.com/brucesongs/kali-claw --skill web-xss
Please help me install this Agent Skill. Skill: web-xss Source: https://github.com/brucesongs/kali-claw/tree/main/skills/web-xss Command: npx skills add https://github.com/brucesongs/kali-claw --skill web-xss
XSS vulnerabilities undermine user safety and data integrity by allowing attackers to inject and execute malicious scripts in trusted contexts. This skill provides structured guidance to identify, analyze, and understand reflected, stored, and DOM-based XSS across modern web applications and lab environments.
Load a sample vulnerable page and apply the payloads to observe XSS behavior.
High-intent search queries and answers about installing and using this skill.
Testing for DOM XSS involves analyzing client-side JavaScript execution flows to identify unsafe sinks and source injections. This skill provides structured methodologies and payload catalogs to evaluate DOM XSS behavior across experimental and real-world web contexts.
Bypassing WAF and CSP protections requires applying mutation payloads and evaluating filter effectiveness against specific defense configurations. This skill provides practical payload catalogs and testing methodologies to assess filter bypass capabilities in modern web contexts.
Identifying reflected and stored XSS requires injecting payload catalogs into input vectors and observing script execution in trusted contexts. This skill guides security testers through step-by-step lab-style workflows to assess both reflected and stored XSS variants effectively.
Yes, this XSS testing methodology is designed for bug bounty, red-team, and defense-oriented testing. It provides step-by-step lab-style workflows and practical payload catalogs to guide effective vulnerability evaluation and remediation across real-world applications.
Evaluating XSS filter effectiveness requires applying diverse payload catalogs that target mutation behavior and CSP considerations. This skill provides comprehensive payload collections and testing methodologies to observe XSS behavior and guide remediation efforts.
cmndcntrlcyberDetect HTTP request smuggling vulnerabilities by analyzing header parsing inconsistencies.
AeonDaveAutomate LFI vulnerability testing and exploitation to achieve remote code execution.
salmanabdurrahmanTrace attacker-controlled JavaScript sources to dangerous execution sinks.
AcczdyInject payloads and analyze responses to detect XSS vulnerabilities in web applications.
