Summary
This is a comprehensive penetration testing skill for identifying and exploiting XSS and HTML injection vulnerabilities in web applications. It walks through stored, reflected, and DOM-based XSS detection, complete with payload examples for session hijacking, credential theft, and phishing form injection. The workflow covers everything from basic reflection testing to filter bypass techniques using encoding and tag variations. You'd use this during authorized security assessments when you need systematic client-side injection testing across all major attack vectors. The skill includes practical examples like keylogger injection and CSS-based data exfiltration, though obviously this is strictly for authorized pentesting with written scope agreements. It's thorough but assumes you already understand JavaScript execution contexts and HTTP fundamentals.
Install to Claude Code
npx -y skills add sickn33/antigravity-awesome-skills --skill xss-html-injection --agent claude-codeInstalls into .claude/skills of the current project.
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →
Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →
Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →
On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
Files
SKILL.md
Select a file.
Featured
Keep your Mac awake while Claude Code and 40+ AI agents run. Sleeps when they're idle.
One time payment $9 →Integrate web data into your AI product. One API to scrape website & brand data.
Get API Key Now →Agent, run crypto. Access onchain data & trade routes via 1inch.
Install now →On Capafy, your Skill runs online 24/7 as an agent product, and you get paid every time someone uses it.
Start earning →
