Cross-Site Scripting and HTML Injection Testing

High-risk offensive security skill. It goes beyond vulnerability detection into actionable credential theft, session hijacking, phishing, and exfiltration. No installer or runtime credential forwarding is present, but the exploitation instructions are disproportionate to a safely scoped testing guide.