If it's a web application that accepts user-input via GET or POST-requests to a XML file or function, then you can use Burp Suite Free's sequencer or repeater afaik  That's the automated yet manual approach as you will have to perform the testing manually but let burp do the repetitive work for you