I have a rather large web site I am rescanning, trying to lower what should be scanned because I'm always hitting the time limit of 25 hours per scan.
In the meantime to provide an accurate report I'm retesting old vulnerabilities, which are mostly XSS and I'm having issues.
- From starting a retest to it being flagged as fixed takes 5-6 hours for XSS vulnerabilities. For some other retests I have done it has taken well within 1 hour.
- Starting multiple retests for XSS vulnerabilities creates such an impact on the webserver that it goes down.
Is there some way to see what is happening during retests? they do not show up in the scan list at all.
Why is the XSS retest taking so long and why is it taking down the website?