Abstract: To discover stored XSS vulnerability with black-box testing,we put forward a new technique which is based on tracing risky data.This technology can discover stored XSS vulnerability automatically on Web application quickly and deeply.This paper introduced how to design the assisted software for this technique birefly as well as prove the effectiveness of this technique.

Key words: Stored XSS,Web security