Html Injection Testing
This is a security testing toolkit for finding HTML injection vulnerabilities where user input gets reflected into pages without proper sanitization. It walks through identifying injection points in search bars, forms, and URL parameters, then shows you how to exploit them with phishing overlays, fake login forms, and page defacement. The workflow is systematic: map vulnerable surfaces, test with basic HTML tags, escalate to stored and reflected injections, then construct realistic phishing attacks. It's geared toward offensive security work during authorized penetration tests. The payloads are ready to use but require solid understanding of the ethical and legal boundaries, this is not a beginner's reconnaissance tool.
- skills.sh installs
- 174
- GitHub stars
- 39.4K
- last updated
- Jun 3, 2026
Install
$ npx -y skills add sickn33/antigravity-awesome-skills --skill html-injection-testing --agent claude-codeInstalls into .claude/skills of the current project.
Files
⚠️ AUTHORIZED USE ONLY This skill is for educational purposes or authorized security assessments only. You must have explicit, written permission from the system owner before using this tool. Misuse of this tool is illegal and strictly prohibited.
Mandatory confirmation gate Before running any command that probes, exploits, changes, persists on, extracts data from, or attempts credential access against a target:
- Ask the user to state the exact target URL, IP, account, or resource.
- Ask the user to confirm written authorization and the permitted scope.
- Show the exact command(s) and explain their expected effect.
- Wait for explicit confirmation in the current conversation.
Without that confirmation, remain read-only and provide defensive guidance only. Prefer a sandbox, disposable VM, or controlled lab.
AUTHORIZED USE ONLY: Use this skill only for authorized security assessments, defensive validation, or controlled educational environments.
HTML Injection Testing
Detailed Guide
Sponsors
Agent CaffeineSponsoredClose your lid, come back to finished work
SnugSponsoredThe clipboard manager for the AI eraPromote your product hereReach 125k+ visitors monthly
WaxSponsoredBlock anything with supervision, without erasing your iPhonePromote your product hereReach 125k+ visitors monthly
knobsSponsoredSee your site on any phone, any day, in any languageDetails
- Repository
- github.com/sickn33/antigravity-awesome-skills
- Categories
- Frontend Development, Testing & QA
- First seen
- Jun 3, 2026
More from sickn33/antigravity-awesome-skills
All 708- Code Simplifier173
- Postgresql Optimization173
- Wireshark Analysis173
- 007171
- Documentation171
- React Flow Node Ts167
- Agent Orchestrator166
- Ai Ml165
- Avoid Ai Writing165
- Android Jetpack Compose Expert163
- Ddd Strategic Design163
- Activecampaign Automation156
- Domain Driven Design153
- Agents Md151
- Api Endpoint Builder150
- Privilege Escalation Methods146
- Agent Framework Azure Ai Py145
- Canva Automation144
- Ddd Tactical Patterns143
- Bevy Ecs Expert142
- Agents V2 Py141
- Ai Studio Image139
- Gitlab Automation139
- Ai Seo137
Recommended
More Frontend Development
generate-component-documentationlongbridge/gpui-componentGenerate documentation for new components. Use when writing docs, documenting components, or creating component documentation.172skills.sh installs
angular-control-flowoguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Control Flow syntax, @if, @for, @switch, @defer, or new template syntax in Angular applications.170skills.sh installsangular-zonelessoguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Zoneless, zoneless change detection, provideZonelessChangeDetection, or removing zone.js in Angular applications.170skills.sh installs
axiom-ui-recordingcharleswiltgen/axiomUse when setting up UI test recording in Xcode 26, enhancing recorded tests for stability, or configuring test plans for multi-configuration replay. Based on WW169skills.sh installsangular-signals-httpoguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Signals and HttpClient, toSignal, toObservable, or HTTP with signals.169skills.sh installsangular-injectoroguzhan18/angular-ecosystem-skillsALWAYS use when working with Angular Injector, inject() function, Provider, or dependency resolution in Angular.165skills.sh installs