Hi and welcome to Hacking A Rise
Lets explain what we are doing
XSS cross site scripting is an attack most common on web apps (aka websites/servers) these attacks can be carried out using HTML, JavaScript, VBScript, ActiveX, Flash, but the most used XSS is malicious JavaScript. That can be executed on the other viewers browsers.
So before you do any attack u need to make sure u are hiding i dont mean with “PROXYCHAINS I USE TOR ” FUCK OFF IF UR DNS IS NOT CHANGED AND U USING A VPN TOR SO NO FUCKING GOOD TO YOU .
So check out Here on how to change your dns on Kali 😀 aint i nice
How to find a vulnerable site google dorks found here
To test a site two xss look for a search bar something like that with this code

now type it and hit enter means the site can be hacked whoop whoop

in part two we will lean how to add ur own java code to sites