23. The system of claim 14 , the instructions further configured to generate the first set of DOMs in association with the first and second sets of web pages by opening the first and second sets of web pages in a web browser context.
14. A system for testing a vulnerability of a web site, comprising: a processor; and a non-transitory computer readable medium having instructions embedded therein, the instructions executable by a processor and configured to: receive a first set of addresses, identify a second set of addresses by analyzing the first set of web pages located at the first set of addresses, and identify a third set of addresses by analyzing a first set of document object models (DOMs) associated with the first set of web pages and a second set of web pages located at the second set of addresses; probe a third set of web pages for presence of a set of vulnerabilities using a document object model (DOM) analysis script to analyze a second set of document object models (DOMs) associated with the third set of web pages as a set of attack vectors is applied to the third set of web pages, and determine presence of the set of vulnerabilities for the third set of web pages based on a result from the probing, wherein the third set of web pages is located at the first, second, and third sets of addresses, wherein the DOM analysis script is inserted into the third set of web pages, and wherein the attack vectors are designed to exploit a vulnerability of a web page.