"Value was not found in the DOM or Response..."

[phoenixg]

Value was not found in the DOM or Response... , What is this mean?

[gabemarshall]

Hi phoenixg, that message means that a test string was sent in a request and could not be found in either the application's response, or the DOM once it finished rendering. In other words, this means the first basic check failed and it's very unlikely that the page is vulnerable to XSS.

I'll take another look at this tomorrow and make sure it's working the way it should.

Cheers,
Gabe

[phoenixg]

Hi @gabemarshall , Thank you explanation, would it be that I am not test the right page? because my test url needs login(cookie), I add --cookie parameter to cookie file, but I don't sure if it's correct. So would it be that reason I failed to test this so it said such message?

[gabemarshall]

It's more likely that there's just a problem with my script ;)

Are you getting the following message?

[warning] [phantom] Loading resource failed with status=fail: http://foo.bar

I'll take a closer look at this in the morning.

Cheers,
Gabe

[phoenixg]

@gabemarshall Thanks for looking, I didn't see the warning message ;)