Exploiting XSS with XSS Validator

While XSS is already detected by various tools such as Burp, Acunetix, and so on, XSS Validator comes in handy. It is the Burp Intruder and Extender that has been designed to automatically validate XSS vulnerabilities.

It is based on SpiderLabs' blog post at http://blog.spiderlabs.com/2013/02/server-site-xss-attack-detection-with-modsecurity-and-phantomjs.html.

Getting ready

To use the tool in the following recipe, we will need to have SlimerJS and PhantomJS installed on our machines.

How to do it...

The following steps demonstrate...