I'm aware that there are various tools for testing for XSS vulnerabilities. However, all the ones that I'm aware of (Vega, possibly BeEF, etc.) operate purely client-side. When testing for stored XSS vulnerabilities specifically, it seems that it would also be useful to directly modified the stored data on the server. For instance, even if input filtering normally protects against stored XSS, SQL injection might still be a way to introduce malicious HTML into the page output (albeit in a roundabout manner).
Are there any tools that are capable of directly modifying database records (or similar server content), in order to test for potential stored XSS vulnerabilities?
For instance, using a legitimate SQL connection (and/or SQL injection) to automatically insert malicious data in the DB, and then using a web crawler to see if that malicious data is properly escaped when/if it gets rendered to the webpage.
If not, is there a particular reason why it's not done, or is it just that nobody has gotten around to it yet?
I'm not necessarily looking for the "best" tool, I just want to know if any exist before I start writing my own.