# webapp

> Web application attack orchestration. Use when attacking web apps, testing for SQLi, XSS, LFI, SSTI, or other web vulnerabilities.

- Author: Monopoly CW
- Repository: veil-protocol/usf-7
- Version: 20260125012158
- Stars: 1
- Forks: 0
- Last Updated: 2026-02-06
- Source: https://github.com/veil-protocol/usf-7
- Web: https://mule.run/skillshub/@@veil-protocol/usf-7~webapp:20260125012158

---

---
name: webapp
description: Web application attack orchestration. Use when attacking web apps, testing for SQLi, XSS, LFI, SSTI, or other web vulnerabilities.
argument-hint: <target-url-or-ip>
---

# Web Application Attack

Attack web application at: $ARGUMENTS

## Attack Types

- XSLT Injection
- Local File Inclusion (LFI)
- SQL Injection (SQLi)
- Remote Code Execution (RCE)
- Server-Side Request Forgery (SSRF)
- Server-Side Template Injection (SSTI)
- XML External Entity (XXE)

## Execution

1. **Recon web services**
```
mcp__omega-nexus__omega_recon(target="$ARGUMENTS", scan_type="default")
```

2. **Research techniques**
```
mcp__omega-nexus__omega_vault_query(
    query="web application attack <technologies>",
    context="security"
)
```

3. **Execute exploits**
```
mcp__omega-nexus__omega_exploit(
    target="$ARGUMENTS",
    exploit_type="rce",
    options={"technologies": "<detected>"}
)
```

## Output

Report:
- Technologies detected
- Vulnerabilities found
- Exploitation attempts and results
- Shell obtained (if successful)