XSS Filter Evasion Payloads These payloads come from the OWASP XSS Filter Evasion Cheat Sheet The payloads contained here can be loaded into a dynamic testing tool such as Burp or OWASP ZAP Check the OWASP wiki if you want to know the intended bypass method for each payload.