hunt-dom - Hunt client-side DOM vulnerabilities
Hunt client-side DOM vulnerabilities involving DOM clobbering, postMessage, service workers, and CSS exfiltration.
Tags
Updated: 2026-10-05Capabilities
Typical Inputs
Typical Outputs
What this skill does
- Analyze DOM clobbering paths
- Inspect postMessage origin checks
- Test service worker exposure
- Detect CSS data exfiltration
- Review JavaScript sinks
- Validate jQuery vulnerabilities
Inputs
- Target URL, IP, or resource
- Permitted target scope
- Target HTML and JavaScript assets
- Reconnaissance files
Outputs
- Vulnerability findings
- Proof-of-concept results
- Defensive guidance
Requirements
- Explicit written authorization
- Relevant testing tools