Dashboard
Open each probe through an isolated session and compare against a direct browser. Status below helps tell the two apart.
All payloads are harmless (text/CSV, fake forms, clipboard events). Nothing is persisted server-side except transient request handling.
Copy / Paste
Event hooks and Clipboard API read/write — does SWI block either direction?
HTML Smuggling
In-browser Blob + object URL download of a benign CSV.
Login form
Credential-entry / submit isolation. Server returns field lengths only.
Extras
Upload, right-click, print, keystrokes, clipboard read.
Session diagnostics
| User agent | … |
|---|---|
| Secure context | … |
| Clipboard API | … |
| Cookies enabled | … |
| Screen | … |
| Referrer | … |
| Timezone | … |