#!/usr/bin/perl -w
use LWP::UserAgent;

my $ua = LWP::UserAgent->new();
my $payload = "\"/><h1>XSS</h1>";
my $html;

print "list --> ";
my $list = <>;
open(URLS, $list);
my @list = <URLS>;
close(URLS);

foreach $url(@list)
{
     $html = $ua->get($url.$payload);
	 $html = $html->decoded_content;
	 if($html =~ m/\<h1\>XSS\<\/h1\>/i)
	 {
	      print "$url is vulnerable\n";
     }
}