xss-html-injection
Pass
Audited by Gen Agent Trust Hub on Aug 10, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [DATA_EXFILTRATION]: Provides instructional templates and payloads for capturing and exfiltrating sensitive browser data, including session cookies and keystrokes, to external domains for demonstration purposes.
- [COMMAND_EXECUTION]: Documents the use of dynamic JavaScript execution sinks such as
eval()andFunction(), including techniques like Base64 encoding and string concatenation to bypass security filters. - [EXTERNAL_DOWNLOADS]: Includes examples of injecting remote scripts and resources from external domains to demonstrate remote script injection vulnerabilities and phishing techniques.
Audit Metadata