> ## Documentation Index
> Fetch the complete documentation index at: https://docs.neo.projectdiscovery.io/llms.txt
> Use this file to discover all available pages before exploring further.

# XSS Agent

> Cross-site scripting detection, context analysis, and blind XSS testing

XSS Agent specializes in finding and proving cross-site scripting vulnerabilities. It analyzes injection context, crafts targeted payloads, and confirms execution in a real browser before filing a finding.

## What it does

* **Context analysis**: identifies where and how user input is reflected in responses (HTML body, script blocks, tag attributes, or comments) and selects the appropriate payload strategy for each
* **Reflected XSS**: tests URL parameters, form inputs, and HTTP headers for immediate reflection
* **Stored XSS**: identifies injection points where input is persisted and later rendered to other users
* **DOM-based XSS**: analyzes client-side JavaScript for source-to-sink patterns
* **Blind XSS**: tests injection points where execution cannot be observed directly, using out-of-band callback infrastructure
* **Payload generation**: crafts context-aware payloads that bypass common filters, WAF rules, CSP configurations, and encoding schemes
* **Browser-based verification**: confirms execution in a real browser before reporting

## How it fits in

XSS Agent runs as part of web application pentests wherever user-controlled input is reflected or stored. For DOM-based and blind XSS, it works alongside Browser Agent to trigger and confirm client-side execution.