Which scripting tool is suitable for performing penetration testing aimed at addressing XSS vulnerabilities?

In general information I want to make you clear that if data is not stored at the end of server side then which script tool we should use?