When we scan the given domain with the CURL tool and print payload into it, if it is in it, it scans it again and adds it to the list.
git clone https://github.com/dogukankurnaz/XSS_Scanner.git
cd XSS_Scanner
chmod +x ./XSS.sh
./XSS.sh http://xxxxx.com/?query=1 payload.txt
If there is no Vulnerability in the file;