[ AUTHORIZED TESTING · MV3 ]

Payload control for the authorized web.

Chrome extension for ethical security testing. Off by default per origin. Optional Smart-Injection suggests a payload category from field context—suggestions only, not vulnerability detection.

Add to Chrome Explore features

[ BUILT FOR HUMANS & WORKFLOWS ]

Two surfaces, one injector.

Enable XSSassin only where you have permission. Hover inject and the in-page panel share your default and random rules from the popup.

FOR HUMANS · BROWSER EXTENSION

B 01

In-page control

Focus a field and a hover control appears. Open the payload panel to pick a built-in or custom entry by category—without leaving the page under test.

WORKFLOW · DEFAULTS & RANDOM

B 02

Smart-Injection

Optional heuristics infer a likely category from name, id, type, and page path. Fixed defaults and custom-only random mode still win when you set them.

HEURISTIC SIGNAL ● OPTIONAL

infer(name, id, type, path)
→ category | fallback scope
// never overrides a fixed default