payload host

Host a small blob — a JS payload, a CSRF form, an SVG/HTML polyglot — at a stable short URL, served repeatedly with the Content-Type you choose and open CORS. For delivering proofs-of-concept in authorized testing. Ephemeral and rate-limited.

For authorized security testing only.

Or from the terminal

curl --data-binary @payload.js \
  "exl.ink/api/host?type=application/javascript"
# → { "url": "exl.ink/h/<id>", ... }