[cybertoto]

Hello all
I want to know how to find XSS vulnerabilities without dork?

thanks a lot

[tux1]

It's not hard. In my experience most sites that have a search bar are vulnerable to xss. The site owners either don't understand xss or just don't care, probably a bit of both.

But any just find a site with a search bar and start seeing what you can input into it. Also look for other ways you can get the server to output your input.

[cybertoto]

thanks mate for info :D a lot of web site have a search bar lol :D

[Terry A. Davis]

It's not hard. In my experience most sites that have a search bar are vulnerable to xss. The site owners either don't understand xss or just don't care, probably a bit of both.

But any just find a site with a search bar and start seeing what you can input into it. Also look for other ways you can get the server to output your input.

So much this.
I can go to anysite, and if they have a search bar I am bound to check for XSS, hell even certain templateed contact forms have XSS problems in the E-mail feild.

[Numinous]

DOMINOS - One Year OLD XSS

http://www.dominos.co.in/blog/?s=\\x3c\\...\\x74\\x3e

HERE YOU GO :)