XSS scanner fails to discover injection
Closed this issue · 2 comments
souilos commented
Hey! thanks for the update guys 🙂
I just edited the script for my payloads to not be encoded from xss.txt but it still fails to detect when it's vulnerable...
HexShad0w commented
Hello,
The problem may be due to the timeout you have set, try setting 5 - 10, the default one is for quick scan, but when the site is a bit slow it may cause false negatives.
Thank you for your feedback!
hexsh1dow
souilos commented
Hey @HexShad0w thanks for you answer!
The issue is still present even with timeout set at 10... Can we chat on TG so we can fix it?
The exact same payload is not working with the tool, I am sure it could miss other injections then..