client-side

Files (45)

• SKILL.md
• INDEX.md · reference/
• clickjacking-cheat-sheet.md · reference/
• clickjacking-quickstart.md · reference/
• client-side-principles.md · reference/
• cors-cheat-sheet.md · reference/
• cors-quickstart.md · reference/
• csrf-quickstart.md · reference/
• dom-xss-advanced.md · reference/
• dom-xss-quickstart.md · reference/
• prototype-pollution-quickstart.md · reference/
• prototype-pollution-resources.md · reference/
• angularjs-injection.md · reference/scenarios/dom-vulnerabilities/
• detection-methodology.md · reference/scenarios/dom-vulnerabilities/
• document-write-sink.md · reference/scenarios/dom-vulnerabilities/
• dom-clobbering-globals.md · reference/scenarios/dom-vulnerabilities/
• dom-clobbering-sanitizer-bypass.md · reference/scenarios/dom-vulnerabilities/
• dom-xss-fundamentals.md · reference/scenarios/dom-vulnerabilities/
• exfiltration-and-chaining.md · reference/scenarios/dom-vulnerabilities/
• innerhtml-sink.md · reference/scenarios/dom-vulnerabilities/
• jquery-sinks.md · reference/scenarios/dom-vulnerabilities/
• postmessage-vulnerabilities.md · reference/scenarios/dom-vulnerabilities/
• prevention-best-practices.md · reference/scenarios/dom-vulnerabilities/
• prototype-pollution-dom.md · reference/scenarios/dom-vulnerabilities/
• tools-and-automation.md · reference/scenarios/dom-vulnerabilities/
• waf-filter-bypass.md · reference/scenarios/dom-vulnerabilities/
• bypass-techniques.md · reference/scenarios/prototype-pollution/
• client-side-pollution.md · reference/scenarios/prototype-pollution/
• detection.md · reference/scenarios/prototype-pollution/
• gadget-discovery.md · reference/scenarios/prototype-pollution/
• prevention.md · reference/scenarios/prototype-pollution/
• server-side-pollution.md · reference/scenarios/prototype-pollution/
• testing-tools.md · reference/scenarios/prototype-pollution/
• beef-integration.md · reference/scenarios/xss/
• cookie-theft.md · reference/scenarios/xss/
• csrf-via-xss.md · reference/scenarios/xss/
• data-exfiltration.md · reference/scenarios/xss/
• defacement.md · reference/scenarios/xss/
• internal-network-scanning.md · reference/scenarios/xss/
• jsonp-callback-iframe-exfil.md · reference/scenarios/xss/
• keylogging.md · reference/scenarios/xss/
• password-capture.md · reference/scenarios/xss/
• phishing-attacks.md · reference/scenarios/xss/
• session-hijacking.md · reference/scenarios/xss/
• xss-bypass-techniques.md · reference/

SKILL.md (first lines)

# Client-Side

Test for client-side vulnerabilities across modern web applications and SPAs.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **XSS** | Reflected, Stored, DOM-based, framework-specific (React, Vue, Angular) |
| **CSRF** | Token bypass, SameSite cookie bypass, cross-origin requests |
| **CORS** | Misconfigured origins, null origin, wildcard credentials |
| **Clickjacking** | Frame-based, drag-and-drop, multi-step |
| **DOM-based** | DOM sinks, source/sink analysis, JavaScript URL schemes |
| **Prototype Pollution** | Client-side gadgets, server-side pollution, property injection |

## Workflow

1. Identify input sources and data flows
2. Classify sink contexts (HTML, attribute, URL, JS, CSS)
3. Enumerate defenses (encoding, CSP, sanitizers, Trusted Types)
4. Craft context-appropriate payloads
5. Validate execution and demonstrate impact
6. Document with reproduction steps and remediation

## Reference

- `reference/xss*.md` - XSS bypass techniques and exploitation
- `reference/csrf*.md` - CSRF techniques and bypasses
- `reference/cors*.md` - CORS misconfiguration testing
- `reference/clickjacking*.md` - Clickjacking techniques
- `reference/dom*.md` - DOM-based vulnerability testing
- `reference/prototype-pollution*.md` - Prototype pollution techniques

From transilienceai/communitytools, MIT.

More from transilienceai/communitytools