Correlated Payload description
Generate Payloads

---

Very Mini <img> Tag Payload - As small as it gets.
Copy Payload to Clipboard

---

Mini <img> Tag Payload - For annoying CSPs that don't let you load or send stuff from elsewhere.
Copy Payload to Clipboard

---

<img> Tag Payload With PHP - Maybe we'll get lucky.
Copy Payload to Clipboard

---

<img> Tag Payload With PHP - As a JSON string - Maybe we'll get lucky.
Copy Payload to Clipboard

---

<img> Tag Redirect Payload.
Copy Payload to Clipboard

---

<img> Tag Redirect Payload - As a JSON string
Copy Payload to Clipboard

---

bash injection with curl command - Maybe we'll get lucky.
Copy Payload to Clipboard

---

bash injection with curl command (lowercase) - Maybe we'll get lucky.
Copy Payload to Clipboard

---

Full Name
Password
Email
Custom xss.vc Subdomain Additional JavaScript Payload URI Injection Correlation Key Copy Key to Clipboard
Note: Must be used with an XSS Hunter compatible client tool, click here for an example. If you want to build your own please see our documentation. Note that injection requests are only stored for 30 days and are purged afterwards. You will still receive XSS alerts after 30 days but they won't be correlated.

Email upon XSS payload fire?


PGP Key

Collect Page List

Update Settings