I'm currently facing this possible reflected XSS vulnerability on a webapp:
When a user clicks on this link, it displays a login page that includes the following code:
I tried to close the
<a> tag using
> with different encodings, but this is filtered and displayed as
%3E. I also tried to close the double quote and use some things like onclick etc. but this is filtered as well.
So I was wondering, is there any tool out there that can automatically test all characters in a given set with different encodings to see what is filtered ?
I could create my own script to do that, but it might save some time and well... reinventing the wheel..
So it appears that there is no tool that provide such capability. ie: test and report for every input what is filtered (and how it renders) or what is not. Burp ends up being the best solution to do that semi-manually, and a Burp extension can be done to fully automate this process.