merdekasiberlab/xssgenai — reverse-engineered prompt
Reverse engineered prompt
Build me a command line tool for finding XSS issues in modern websites, especially single page apps and mixed sites with dynamic content. I want it to crawl a target in a quick mode and a deeper browser driven mode, then test likely inputs with smart payloads instead of just spraying random strings.
It should notice basic defenses and WAF behavior, slow itself down when needed, and give useful hints if a firewall seems to be blocking things. Please include support for login flows, stored and blind XSS checks, GraphQL endpoint discovery, and some way to confirm real execution in the browser with evidence like screenshots or traces.
I also want the results ranked so the most promising findings show up first, with a clear summary of what reflected, what executed, and what the app seems to sanitize or block. If an API key is provided, add optional AI analysis with short explanations and suggested next steps. A simple English and Bahasa Indonesia CLI experience would be great. Look up current docs online if you need to.
Want more depth? Deep Reverse