[pooplatte]

Hello all,

I am wondering what best list and tools you use to automate or manually test with XSS. I've seen some use tools like ffuf or XSStrike but I've never had much luck with them as opposed to a different type of tool like sqlmap which is pretty good and finding SQL vulns. Is there something I'm missing or it's just possibly harder to find good XSS payloads on modern sites?

Thanks