Overview
Security testing: inject payloads into input fields. XSS, SQLi, HTML injection and more.
XSSassin: The Ultimate Payload Injector for Pentesters & Bug Bounty Hunters XSSassin is an advanced security testing extension designed specifically for ethical hackers, penetration testers, and security-conscious developers. Seamlessly inject common attack payloads directly into web page input fields to test for vulnerabilities like XSS, SQLi, and more—all with a single click! 🚀 CORE FEATURES: One-Click Injection: Hover over any text field, textarea, or contenteditable area to instantly reveal quick-inject buttons. Massive Payload Library: Built-in payloads for Cross-Site Scripting (XSS), SQL Injection (SQLi), HTML Injection, NoSQL, LDAP, OS Command Injection, XPath, SSTI, CRLF, and XXE. Custom Payloads: Tailor your pentesting arsenal by adding your own custom payloads in the extension options. Auto-Fill All: Hunting for bugs? Fill every input on a target page with your default or a random payload simultaneously. Per-Site Toggling: Easily enable or disable the extension on specific domains to keep your regular browsing clean. 🛠 WHO IS THIS FOR? Bug Bounty Hunters looking to speed up manual testing. Penetration Testers conducting web application security assessments. QA Engineers and Developers ensuring their forms are sanitized and secure. ⚠️ IMPORTANT / DISCLAIMER: XSSassin is built strictly for educational purposes and authorized ethical hacking. Only use this tool on applications you own or have explicit permission to test. The developers assume no liability for misuse.
Details
- Version1.3.0
- UpdatedMarch 13, 2026
- Offered byyesmayank
- Size607KiB
- LanguagesEnglish
- DeveloperMayank Mani Tripathi
MOH MANHAT TARAMANDAL SIDDHARTH ENCLAVE gorakhpur, Uttar Pradesh 273017 INEmail
sismmt09@gmail.comPhone
+91 87662 07451 - TraderThis developer has identified itself as a trader per the definition from the European Union and committed to only offer products or services that comply with EU laws.
Privacy
This developer declares that your data is
- Not being sold to third parties, outside of the approved use cases
- Not being used or transferred for purposes that are unrelated to the item's core functionality
- Not being used or transferred to determine creditworthiness or for lending purposes
