http://www.kitploit.com/2016/06/xsspy-web-application-xss-scanner.html