Skip to content

Commit

Permalink
+- finish adding xssstriker
Browse files Browse the repository at this point in the history
  • Loading branch information
ElNiak committed Jun 19, 2024
1 parent 54646c7 commit 018db22
Show file tree
Hide file tree
Showing 8 changed files with 1,519 additions and 702 deletions.
793 changes: 114 additions & 679 deletions bounty_drive/attacks/xss/xss.py

Large diffs are not rendered by default.

11 changes: 0 additions & 11 deletions bounty_drive/attacks/xss/xss_config.py

This file was deleted.

11 changes: 8 additions & 3 deletions bounty_drive/attacks/xss/xss_cve.py
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,12 @@
from termcolor import cprint

from utils.app_config import USER_AGENTS
from requester.request_manager import deJSON, handle_anchor, js_extractor, start_request
from requester.request_manager import (
de_json,
handle_anchor,
js_extractor,
start_request,
)


checkedScripts = set()
Expand All @@ -33,14 +38,14 @@ def scan(data, extractor, definitions, matcher=None):


def _simple_match(regex, data):
regex = deJSON(regex)
regex = de_json(regex)
match = re.search(regex, data)
return match.group(1) if match else None


def _replacement_match(regex, data):
try:
regex = deJSON(regex)
regex = de_json(regex)
group_parts_of_regex = r"^\/(.*[^\\])\/([^\/]+)\/$"
ar = re.search(group_parts_of_regex, regex)
search_for_regex = "(" + ar.group(1) + ")"
Expand Down
Loading

0 comments on commit 018db22

Please sign in to comment.