xss-html-injection

Execute comprehensive client-side injection vulnerability assessments on web applications to identify XSS and HTML injection flaws, demonstrate exploitation techniques for session hijacking and credential theft, and validate input sanitization and output encoding mechanisms. This skill enables systematic detection and exploitation across stored, reflected, and DOM-based attack vectors.

Identify Input Reflection Points Locate areas where user input is reflected in responses:

Basic Detection Testing Insert test strings to observe application behavior:

当用户要求“测试 XSS 漏洞”、“执行跨站脚本攻击”、“识别 HTML 注入缺陷”、“利用客户端注入......”时，应该使用此技能。 来源：sickn33/antigravity-awesome-skills。