A controlled injector
You enable an origin, choose defaults or categories, and inject payloads into inputs during testing you are authorized to perform. Smart-Injection only biases category choice from field context.
[ AUTHORIZED USE ONLY ]
Test what you are allowed to touch.
XSSassin exists for educational and authorized ethical security testing. Use it only on applications you own or have explicit written permission to assess.
Not a scanner
XSSassin does not crawl sites, confirm vulnerabilities, or automate exploitation. It does not grant permission you do not already have.
Stay inside scope
Follow local law and program rules. Do not use XSSassin against third-party systems without authorization. The developers assume no liability for misuse.
Local by design
The Chrome Web Store listing states the extension does not collect or use your data. Settings live in browser storage on your machine.