XSS Payload Generator

Build authorized XSS proof payloads by reflection context, tune proof variables, copy encoding variants, and capture report-ready notes.

Workbench mode

Pick the reflection context, tune proof variables, and copy the right encoding.

Payload presets

Start from a common context, proof, callback, CSP, or bypass workflow.

Proof variables
Filters and encoding

17 payloads match the current filters.

XSS workflow

Step 1

Locate reflection

Step 2

Identify context

Step 3

Break out safely

Step 4

Prove execution

Step 5

Document fix

Use the smallest proof that matches the reflection context before moving to encoded or bypass variants.

This payload is likely affected by Content Security Policy. Check script-src, event handlers, and nonce behavior.

Generated payload

HTML Body - Script tag proof

raw
<script>alert(1)</script>

Related Tools

Other tools in this category, for the next step in the same workflow.

Interactive Tool

Nmap Builder

Build Nmap command lines with scan types, timing, targets, and NSE options.
Interactive Tool

Password Generator

Generate strong random passwords with tunable length and character policies.
Interactive Tool

Reverse Shell Generator

Generate reverse shell payloads for Bash, Python, PowerShell, PHP, and more.
Interactive Tool

Web Payload Builder

Generate SQLi, SSTI, SSRF, and command-injection payloads across common stacks.