XSS Payload Generator

Iframe with JavaScript protocol

Embed tag with base64 encoded JavaScript

Object tag with JavaScript protocol

DOM XSS through URL hash

DOM XSS via document.write

DOM XSS via innerHTML assignment

Works in multiple contexts

Breaks out of attribute and executes JS

Works in single or double quoted attributes

Uses constructor chain to execute code

Exfiltrate cookies via fetch

Uses MutationObserver for persistent XSS

Register malicious service worker

Angular template expression injection

Exploit React dangerouslySetInnerHTML

Bypass CSP using JSONP endpoints

CSP bypass using whitelisted Angular CDN

Blind XSS payload for XSS Hunter