Capture page secrets without running JavaScript.
What it does
Guides HTML-injection testing to capture sensitive page content when JavaScript execution is blocked.
When to use it
Use when an HTML injection point exists, JavaScript execution is blocked, and sensitive data appears after the injection point.
How to use it
Give it an HTML injection point with blocked JavaScript; it provides an approach for capturing sensitive content that follows it.
What you provide
- the HTML injection point
Latest review
What you need · 1
The core technique uses a server endpoint under your control as the destination for captured page content.
Access · 2
This skill
your server
Write
Sends captured page content
the target page
Read
Inspects sensitive page content