updates on scanning process

On start of attack, scan tab for all input tags to test on.

Side note: should we put the vulnerability signature in the payload,
not sure how would multiple injection payload work.