Help me please

[Daimones81]

Hi, I'm trying your program.
I'm testing it on a vulnerable online application,
http://testphp.vulnweb.com/
but it doesn't find me any sql injection or xss. What am I doing wrong ?
In your readme it says:
The deep scanner also performs both passive and active scans to identify potential vulnerabilities within the web application. This includes identifying common vulnerabilities such as SQL injection, cross-site scripting (XSS), and remote file inclusion.