I\'m testing burp against a vulnerable application as part of work for my client. There was one successful xss payload related to DNS lookup which
burp
DNS lookup