Collections

Collections store generated payloads in IndexedDB in your browser. Nothing is uploaded to a server.

Built-in library

On first visit, xsspayloads seeds category collections (Reflected, WAF bypass, CSS injection, …) plus a full library with common encoding variants.

Your collections

1. Create a named collection.
2. From the builder, pick a collection and Save the current payload.
3. Export JSON for backup or sharing within your team.
4. Import JSON to restore or merge a collection file.

Import format

Files must match the xsspayloads collection schema (schemaVersion: 1, name, items with payload text and category).