I m trying to built a Web Vulnrebilty Scanner which will test CGI/RFI/XSS/ on a remote Web Server.Here are my baby steps for do this project.
1-Discover pages in remote site.
(ex: www.google.com , www.google.com/x.html google.com/y.html ...)
2-Post some scripts to the link and test the response.
3-Read the source code of html files and search some sytax in it.
I need your help on 3 topic above. Thank you so much.