Individual skill

client-side

Client-side vulnerability testing - XSS (reflected/stored/DOM), CSRF, CORS misconfiguration, Clickjacking, DOM-based attacks, and Prototype Pollution.

skills/client-side/SKILL.md

Read pinned source

Source commit 95fdc128af4ca1ae16b3226f9430f1bad97b0656

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: Yes
Repository scan complete: No
Skill scan complete: Yes
Observed behavior: Network or broad shell
Last checked: Nov 10, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 613
Repository last updated: Jul 29, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

bounty-hunters Repository topic
hackerone Repository topic
pentest Repository topic
pentest-tool Repository topic
security Repository topic
security-research Repository topic
security-tools Repository topic
security Derived category
testing Derived category
security-application Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 1,493 bytes
reference/INDEX.mddoc · 4,455 bytes
reference/clickjacking-cheat-sheet.mddoc · 6,130 bytes
reference/clickjacking-quickstart.mddoc · 4,812 bytes
reference/client-side-principles.mddoc · 6,780 bytes
reference/cors-cheat-sheet.mddoc · 7,973 bytes
reference/cors-quickstart.mddoc · 5,045 bytes
reference/csrf-quickstart.mddoc · 6,265 bytes
reference/dom-xss-advanced.mddoc · 6,369 bytes
reference/dom-xss-quickstart.mddoc · 5,323 bytes
reference/prototype-pollution-quickstart.mddoc · 4,593 bytes
reference/prototype-pollution-resources.mddoc · 8,969 bytes
reference/scenarios/dom-vulnerabilities/angularjs-injection.mddoc · 4,977 bytes
reference/scenarios/dom-vulnerabilities/detection-methodology.mddoc · 4,016 bytes
reference/scenarios/dom-vulnerabilities/document-write-sink.mddoc · 6,771 bytes
reference/scenarios/dom-vulnerabilities/dom-clobbering-globals.mddoc · 8,049 bytes
reference/scenarios/dom-vulnerabilities/dom-clobbering-sanitizer-bypass.mddoc · 6,569 bytes
reference/scenarios/dom-vulnerabilities/dom-xss-fundamentals.mddoc · 5,375 bytes
reference/scenarios/dom-vulnerabilities/exfiltration-and-chaining.mddoc · 5,003 bytes
reference/scenarios/dom-vulnerabilities/innerhtml-sink.mddoc · 3,696 bytes
reference/scenarios/dom-vulnerabilities/jquery-sinks.mddoc · 6,412 bytes
reference/scenarios/dom-vulnerabilities/postmessage-vulnerabilities.mddoc · 9,744 bytes
reference/scenarios/dom-vulnerabilities/prevention-best-practices.mddoc · 7,837 bytes
reference/scenarios/dom-vulnerabilities/prototype-pollution-dom.mddoc · 8,060 bytes
reference/scenarios/dom-vulnerabilities/tools-and-automation.mddoc · 8,110 bytes
reference/scenarios/dom-vulnerabilities/waf-filter-bypass.mddoc · 4,194 bytes
reference/scenarios/prototype-pollution/bypass-techniques.mddoc · 4,020 bytes
reference/scenarios/prototype-pollution/client-side-pollution.mddoc · 5,498 bytes
reference/scenarios/prototype-pollution/detection.mddoc · 8,069 bytes
reference/scenarios/prototype-pollution/gadget-discovery.mddoc · 5,247 bytes
reference/scenarios/prototype-pollution/prevention.mddoc · 8,223 bytes
reference/scenarios/prototype-pollution/server-side-pollution.mddoc · 7,706 bytes
reference/scenarios/prototype-pollution/testing-tools.mddoc · 4,878 bytes
reference/scenarios/xss/beef-integration.mddoc · 3,260 bytes
reference/scenarios/xss/cookie-theft.mddoc · 4,719 bytes
reference/scenarios/xss/csrf-via-xss.mddoc · 5,865 bytes
reference/scenarios/xss/data-exfiltration.mddoc · 4,108 bytes
reference/scenarios/xss/defacement.mddoc · 3,572 bytes
reference/scenarios/xss/internal-network-scanning.mddoc · 5,324 bytes
reference/scenarios/xss/jsonp-callback-iframe-exfil.mddoc · 5,157 bytes
reference/scenarios/xss/keylogging.mddoc · 5,566 bytes
reference/scenarios/xss/password-capture.mddoc · 5,577 bytes
reference/scenarios/xss/phishing-attacks.mddoc · 4,242 bytes
reference/scenarios/xss/session-hijacking.mddoc · 3,648 bytes
reference/xss-bypass-techniques.mddoc · 10,151 bytes

Read excerpt


# Client-Side

Test for client-side vulnerabilities across modern web applications and SPAs.

## Techniques

| Type | Key Vectors |
|------|-------------|
| **XSS** | Reflected, Stored, DOM-based, framework-specific (React, Vue, Angular) |
| **CSRF** | Token bypass, SameSite cookie bypass, cross-origin requests |
| **CORS** | Misconfigured origins, null origin, wildcard credentials |
| **Clickjacking** | Frame-based, drag-and-drop, multi-step |
| **DOM-based** | DOM sinks, source/sink analysis, JavaScript URL schemes |
| **Prototype Pollution** | Client-side gadgets, server-side pollution, property injection |