Testing for XSS – Where to Find It, How to Verify It

There are several great methods for discovering XSS. We'll start with a tool we've already begun using in preparing for an engagement, diving into some new parts of Burp and an XSS-related Burp extension.

Burp Suite and XSS Validator

One problem with automated and semi-automated solutions for XSS is distinguishing signal from noise. To do that, a useful Burp plugin, XSS Validator, runs a PhantomJS-powered web server to receive the results of Burp queries and looks for a string injected into the alert() call embedded within the applied XSS snippets. It provides a clean way of culling the results of your XSS submissions to absolute confirmed vulnerabilities...