skills.rest
lNwNl
lNwNlCOMMUNITY
Explore all skills by this author →
GitHub

xss-cross-site-scripting

Identify and validate XSS injection routes across HTML, attribute, JavaScript, URL, and XML contexts.

2|Updated May 15, 2026
Search Tags:#xss#blind xss#dom clobbering#csp bypass#waf evasion#trusted types#xs-leaks
One-click install
npx skills add https://github.com/lNwNl/Methodos --skill xss-cross-site-scripting
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: xss-cross-site-scripting
Source: https://github.com/lNwNl/Methodos/tree/main/docker/opencode/skills/xss-cross-site-scripting
Command: npx skills add https://github.com/lNwNl/Methodos --skill xss-cross-site-scripting

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

It helps you systematically discover and validate cross-site scripting paths when input is reflected or stored across different HTML/attribute/JS/URL contexts, and when modern mitigations like CSP and Trusted Types complicate exploitation.

Core Features & Use Cases

  • Injection-context driven payload selection: choose the right attack string based on whether reflection occurs in HTML body, attributes, script blocks, URL sinks, or XML contexts.
  • Second-order and blind XSS workflows: craft payloads that survive storage/encoding and cover parameters that are not immediately reflected.
  • Advanced bypass and post-exploitation guidance: use mXSS/DOMPurify differentials, DOM clobbering, Trusted Types policy gaps, CSP bypass vectors, XS-Leaks side channels, and session-fixation/HttpOnly-relevant exploitation paths.
  • Framework and persistence vectors: cover modern framework XSS patterns (React/Vue/Angular/Next.js) and service worker persistence after successful script execution.

Quick Start

Use the xss-cross-site-scripting skill to enumerate likely reflection contexts for your target inputs and then select an appropriate advanced payload for each sink to confirm execution and escalation paths.

Frequently Asked Questions about xss-cross-site-scripting

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I find XSS injection routes when CSP and Trusted Types block execution?▼

Find XSS injection routes under CSP and Trusted Types by identifying context-aware reflection paths and applying specific bypass vectors like policy gaps or DOM clobbering to confirm script execution.

What is the best way to test for blind and second-order XSS?▼

Testing for blind and second-order XSS requires crafting payloads that survive backend storage and encoding, ensuring they execute when later inserted into DOM sinks or HTML contexts without immediate reflection.

How do I select the right XSS payload for different HTML and JavaScript contexts?▼

Select XSS payloads by matching the injection string to the exact reflection context, differentiating between HTML body, attribute, script block, URL sink, and XML namespace environments to ensure proper syntax and execution.

Can I bypass WAF filtering using DOM clobbering and mXSS techniques?▼

Bypass WAF filtering and DOM sanitization using DOM clobbering and mXSS differentials, exploiting parser inconsistencies to execute payloads that evade standard regex or DOMPurify filtering mechanisms.

Does this XSS testing approach cover modern frameworks like React and Vue?▼

XSS testing covers modern frameworks like React, Vue, Angular, and Next.js by identifying framework-specific injection patterns, component sink vulnerabilities, and service worker persistence vectors after execution.

Why should I include XS-Leaks and side-channel considerations in XSS testing?▼

Include XS-Leaks and side-channel considerations in XSS testing to evaluate post-exploitation impacts, enabling session-fixation, HttpOnly cookie extraction, and cross-site data exfiltration beyond basic script execution.

Related Skills

Explore More Legal & Compliance Skills→
EntroVyxEntroVyx
3

enterprise-vpn-attack

Fingerprint enterprise SSL VPN appliances and check for known CVEs.

Community
Advanced
Prohao42Prohao42
120

dangling-markup-injection

Exfiltrate CSRF tokens and session data via dangling HTML markup.

Community
Advanced
ok-helloworldok-helloworld
241

xss-cross-site-scripting

Select context-appropriate XSS payloads for HTML, attribute, JavaScript, URL, and XML sinks.

Community
Advanced
SnailSploitSnailSploit
2.9k

xss

...

Community
Advanced