After you execute above sequence of commands you can see the results
as shown in the sequence of screenshots below.
Screenshot 1: Testing the vulnerable website
for XSS Injections using XSSer
Screenshot 2: Testing the vulnerable website
for XSS Injections using XSSer [Continued]
Screenshot 3: Final results of XSS Detection
operation. You can see that XSSer has already found couple of XSS flaws
in our test website.
Exploitation of XSS Injections
In the above screenshot, the text marked in blue indicates attack
vector which can trigger XSS Injections on this website.
Now we can go ahead and manually verfy these injections and it does not
take long.
Below is the screenshot showing successful
exploitation of detected XSS Injection.
Conclusion
This article shows how easy to use XSSer tool to
detect those hidden XSS flaws in any website using very simple steps.
You can rest your brain for the time being while XSSer does all the job
for you.
