Headless Browser Attack Payloads

Source: PayloadsAllTheThings/Headless Browser Category: payloads-research | Skill ID: payloads-headless

Overview

Headless browser exploitation payloads for SSRF, XSS, and sandbox escape via Puppeteer/CDP.

This skill integrates the full PayloadsAllTheThings (PATT) payload library for the Headless Browser Attack Payloads domain into the REA_Skill framework. Use it during authorized penetration testing, bug bounty research, security audits, and CTF challenges.

Workflow

1. Recon & Identification

• Identify the target technology stack and injection points
• Enumerate endpoints, parameters, and input vectors
• Determine applicable payload categories from the reference below