For hunting XSS choose a unique working payload.

Wherever we get any input field just try for XSS.

Tools