@lucian and you can also use ronin-vulns to test individual URLs for reflected XSS:

$ ronin-vulns xss https://target/oauth/idp/logout?post_logout_redirect_uri=https://example.com/

#xss #securitytools #vulnscanner #security #infosec #websec