Legal & Acceptable Use

xsspayloads is provided for educational purposes, authorized security testing, bug bounty programs, CTF competitions, and security research only. You must have explicit written permission before testing any system you do not own.

• Only use xsspayloads against systems you own or have explicit authorization to test.
• Do not use generated payloads for malicious attacks, harassment, or unauthorized access.
• You are solely responsible for compliance with applicable laws and regulations.
• xsspayloads does not execute payloads on remote targets — you control where payloads are used.

Payload generation and collections are stored locally in your browser. No payload data is sent to our servers.