How to: use ezXSS extensions

ezXSS has the option to install extensions. Extensions can modify or extend existing payloads.

Installing Extensions

There are multiple ways to install extensions in ezXSS:

Method	Description	Details
Public GitHub Repo	Point ezXSS to a public GitHub repository	Install all .js extension files from the repository
GitHub Blob URL	Use a direct blob URL from a public GitHub repository	Install a single .js extension file via direct link
GitHub Gist	Use a public or private Gist	Single .js extension file per Gist
ezXSS Panel	Create and add custom extension directly	Manage extensions through the ezXSS management panel

All extensions installed via GitHub can also be updated via GitHub if the author updates the extension.

How to Create an Extension

Every extension must start with a specific comment block that provides metadata about the extension. This is crucial for ezXSS to recognize and load the extension properly.

Required Header

// <ezXSS extension>
// @name              My First Extension
// @description       This is my first extension
// @author            Your Name
// @version           1.0
// </ezXSS extension>

• @name: The name of your extension.
• @description: A brief description of what the extension does.
• @author: Your name or handle.
• @version: The version number of your extension.

If this header is missing or incorrect, the extension will not load.

---

For more detailed information about extensions, visit the extensions repo: https://github.com/ssl/ezXSS-extensions