Credit finder of XSS bug