Find gaps in a website's script security policy.
Identifies Content Security Policy weaknesses and offers techniques for bypassing restrictions on scripts and data exfiltration.
When to use it
Use when Content Security Policy blocks XSS or data exfiltration and policy weaknesses or bypass channels need investigation.
Give it a CSP bypass investigation; it identifies policy weaknesses and applicable bypass or exfiltration techniques.
No setup requirements listed.
This skill
CSP-protected web pages
Reads web page security policies