I am working for a project make a XSS scan tool using python.
I have a sample url:
I've found that it has a vulnerability by
A basic different from normal url and xss url is a alert box has been showed in the browser. But when using python, how can i we see that or detect which url is vulnerability?
There is many XSS tools such as: wapiti, w3af,... But how's it work? What is principal xss scanning?
I've tried python request library:
import requests xss_url = 'http://www.foo.bar/index.php?ids="><SCrIpT>alert('XSS')</ScRiPt>' r = requests.get(xss_url); print r.text normal_url = 'http://www.foo.bar/index.php?ids=111' t = requests.get(normal_url); print t.text
But result of r.text and t.text is the same.