xss

• [ ] Check is there is any parameter to test on
• [ ] Give keyword with every payload
• [ ] Try encoded payloads
• [ ] Use x8 if no parameter from website reflects payload
• [ ] Check them again for xss
• [ ] See if payload is stored then try stored xss
• [ ] Try blind xss where we are sending data to the admin/dashboard
• [ ] check for DOM xss
• [ ] is site having location.search, location.hash etc.
• [ ] then check if the payload is visible in sources in browser and search using keyword

urlflux

use it for url crwalling with katana

If XSS not foun

In case XSS is not found try to do HTMLi

Understanding — SQL Identification

What you described:

Change id=1 to id=) and if it gives a 500 error, there might be SQLi.

The correction: