Fired XSS

Copy-Paste Payloads

URL pulled from active config

URL Configuration

Interactsh

Register a unique OOB URL via ProjectDiscovery's interactsh service. The server polls for interactions in the background.

Not registered

Custom URL

Point payloads at your own server (or this instance's public address) instead of interactsh.

Active Callback URL

This URL is embedded in all generated payloads.

Not configured

Interactsh Interactions (OOB hits, not full XSS data)