This tiny bash script bulk scans the list of urls and shows if the url is vulnerable or no and if the urls is vulnerable, it saves the results in to a text file XSS-Scan-results.txt
I'm not the original author of this script. I modified according to my requirements. +
It's mandatory to encode all "&" as "%26" in URL parameters. Otherwise, #KNOXSS may not find any XSS vulnerabilities.
The script shows if the url is vulnerable or no:
If a vulnerable url found, it will create a file in the running directlry with the vulnerable url and PoC
Caution