What specific vulnerabilities does this skill verify?

This skill is specialized for verifying Cross-Site Scripting (XSS) and Open Redirect vulnerabilities through automated HTTP request manipulation.

Does this skill require external dependencies?

It utilizes common command-line utilities including Curl, Bash, and Grep to perform its verification logic and response parsing.

Is the verification process automated?

Yes, it uses predefined success criteria and pattern matching to automatically determine if a vulnerability is successfully triggered.

Can I use raw requests from Burp Suite?

Yes, the skill is designed to handle raw HTTP request parsing, making it highly compatible with data exported from security tools like Burp Suite.

How does it handle authenticated sessions?

The skill manages session context by performing automated cookie swaps, allowing you to verify vulnerabilities that require specific user authorization.

Web Vulnerability Verification

Name: Web Vulnerability Verification
Author: jd-opensource

byjd-opensource

•

165

•

보안 및 테스팅

Automates the validation of web vulnerabilities like XSS and Open Redirects through raw HTTP request manipulation and session context handling.

This skill empowers security researchers and developers to automate the rigorous process of verifying web-based vulnerabilities. By parsing and reconstructing raw HTTP requests, it enables precise payload delivery and session-aware testing via cookie swapping. It is particularly effective for confirming Open Redirect and Cross-Site Scripting (XSS) flaws by utilizing advanced response pattern matching, such as detecting Meta Refresh tags and HTTP 30x status codes, ensuring that security findings are valid and reproducible.

주요 기능

01Seamless integration with Curl, Bash, and Burp Suite workflows

02Strict response analysis using Meta Refresh and 30x matching

03Automated session context and cookie manipulation

04165 GitHub stars

05Raw HTTP request parsing and reconstruction

06Targeted payload delivery for XSS and Open Redirects

사용 사례

01Streamlining security audits for complex web applications

02Automating the validation of bug bounty vulnerability reports

03Conducting security regression testing after applying patches

What are Skills?·How to Install

Install with 🐟 Skill.Fish

npx skillfish add jd-opensource/joysafeter pentest-vuln-verify

For use in Claude.ai and ChatGPT

Download Skill