skills.rest
Chid0k
Chid0kCOMMUNITY
Explore all skills by this author →
GitHub

xss-detect

Detect Cross-Site Scripting vulnerabilities in web applications using Playwright and Burp.

Updated May 16, 2026
Search Tags:#xss#security testing#penetration testing#web security#vulnerability detection
One-click install
npx skills add https://github.com/Chid0k/claude-marketplace --skill xss-detect
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: xss-detect
Source: https://github.com/Chid0k/claude-marketplace/tree/main/plugins/vuln-detect-plugin/skills/xss-detect
Command: npx skills add https://github.com/Chid0k/claude-marketplace --skill xss-detect

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill requires playwright, burp, and includes scripts (resource) and references (resource) and assets (resource) components.

What problem does it solve?

This Skill helps security professionals identify and mitigate Cross-Site Scripting (XSS) vulnerabilities in web applications, thereby enhancing the overall security posture.

Core Features & Use Cases

  • XSS Detection: Identifies various types of XSS vulnerabilities including Reflected, Stored, and DOM-based XSS.
  • Analysis Tools: Utilizes Playwright and Burp to perform black-box and white-box testing.
  • Payload Crafting: Offers methods to craft and bypass XSS payloads in different contexts.
  • Bypass WAF Techniques: Provides bypass techniques for common Web Application Firewalls (WAF).
  • Use Case: For a pentester auditing a web application for XSS vulnerabilities, this Skill can be used to automate the detection and analysis process.

Quick Start

Use the xss-detect skill to identify XSS vulnerabilities in a web application at 'https://example.com'.

Frequently Asked Questions about xss-detect

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I detect Cross-Site Scripting vulnerabilities in a web application?▼

Detect Cross-Site Scripting vulnerabilities by analyzing web application input points, crafting targeted payloads, and verifying execution across HTML, JavaScript, CSS, and SVG contexts.

Can I use Playwright and Burp for automated XSS penetration testing?▼

Yes, Playwright and Burp are required dependencies for conducting XSS penetration testing, supporting both black-box and white-box analysis to identify Reflected, Stored, and DOM-based vulnerabilities.

What is the best way to bypass WAF protections when testing for XSS?▼

Bypass WAF protections during XSS testing by utilizing specialized payload crafting techniques designed to evade common Web Application Firewalls across various execution contexts like HTML and JavaScript.

How do I craft XSS payloads for different web application contexts?▼

Craft XSS payloads for different contexts by applying analysis techniques that target specific execution environments including HTML, JavaScript, CSS, and SVG to verify vulnerability triggers.

Does this XSS detection method handle DOM-based XSS vulnerabilities?▼

Yes, the XSS detection mechanism handles DOM-based vulnerabilities alongside Reflected and Stored XSS by analyzing client-side input points and execution flows using Playwright and Burp.

Related Skills

Explore More Software Engineering Skills→
zebbernzebbern
4.5k

Burp Suite Web Application Testing

Automate Burp Suite web application security testing across intercept, modify, scan, and manual workflows.

Community
Advanced
Ed1s0nZEd1s0nZ
5.6k

xss-testing

Test web applications for reflected, stored, and DOM-based XSS vulnerabilities.

Community
Intermediate
giosuetedeschi-specgiosuetedeschi-spec

HTML Injection Testing

Identify and validate HTML injection vulnerabilities in web application inputs.

Community
Intermediate
froggugugugufroggugugugu

security-scan

Execute SCA, SAST, DAST, and secret detection scans to report vulnerabilities.

Community
Advanced