XSS Basics — Safe Learning Simulator

Learn Reflected, Stored and DOM XSS in a safe, simulated environment. This page does not execute untrusted scripts — it detects common payload patterns and shows simulated effects so you can learn without risk.

Reflected Stored DOM-based

Score: 0

Vulnerable (simulated) Secure (escaped preview)

Payload / Message

Output (simulated)

Nothing rendered yet. Use Render / Preview (Safe) / Run DOM Action.

Stored Messages

No stored messages.

Activity Log

Ready.

Shortcuts: 1=img onerror, 2=script, 3=svg, 4=visual change, R=reset