generate_xss_callback
Create JavaScript payloads that ping your webhook when executed to detect blind XSS vulnerabilities during bug bounty testing.
Instructions
Generate XSS (Cross-Site Scripting) callback payloads for bug bounty testing. Creates JavaScript payloads that ping your webhook when executed, useful for detecting blind XSS.
Input Schema
TableJSON Schema
| Name | Required | Description | Default |
|---|---|---|---|
| webhook_token | Yes | The webhook token (UUID) from webhook.site | |
| identifier | No | Custom identifier to track which injection point triggered (e.g., 'comment-field', 'profile-name') | |
| include_cookies | No | Include payload that exfiltrates cookies (default: true) | |
| include_dom | No | Include payload that captures DOM info like URL and referrer (default: true) |