domains / families / security / xss-html-injection

xss-html-injection

authentic

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms.

When to use

• This skill is applicable to execute the workflow or actions described in the overview.

When not to use

• unauthorized security assessments
• injecting payloads that could damage production systems
• exfiltrating real user data beyond scope requirements
• using discovered vulnerabilities for unauthorized access

Skill page

Source