We use a unique random marker (e.g. PXSS_ABC123) that is both inserted into the payload and searched for in the response. This reduces accidental matches. Simple substring check: the scanner looks for ...

Important: Only scan machines you own or have explicit permission to test.