Description
This skill focuses on automatically verifying web vulnerabilities (specifically open redirect and XSS) by manipulating raw HTTP requests. It handles session context switching (Cookie replacement) and strict success criteria validation.
Core Capabilities
- Raw HTTP request parsing and reconstruction
- Authenticated session manipulation (Cookie swapping)
- Automated Payload delivery
- Response pattern matching (Meta Refresh / HTTP 30x)
Reference Workflow
Tools
- Curl (HTTP client)
- Bash (scripting)
- Grep (response parsing)
- Burp Suite (for generating raw requests)