diff --git a/lib/attacks/sqlmap_scan/__init__.py b/lib/attacks/sqlmap_scan/__init__.py index b048aaa..c00c68f 100644 --- a/lib/attacks/sqlmap_scan/__init__.py +++ b/lib/attacks/sqlmap_scan/__init__.py @@ -145,11 +145,10 @@ def find_sqlmap(to_find="sqlmap"): return found_path -def sqlmap_scan_main(url, port=None, verbose=None, opts=None, auto_start=False, **kwargs): +def sqlmap_scan_main(url, port=None, verbose=None, opts=None, auto_start=False): """ the main function that will be called and initialize everything """ - parse_conf = kwargs.get("parse_conf", None) def ___dict_args(): """ diff --git a/lib/attacks/xss_scan/__init__.py b/lib/attacks/xss_scan/__init__.py index 152d201..cc4773f 100644 --- a/lib/attacks/xss_scan/__init__.py +++ b/lib/attacks/xss_scan/__init__.py @@ -1,11 +1,12 @@ import os import re +import threading +import tempfile +import importlib try: import urlparse # python 2 except ImportError: import urllib.parse as urlparse # python 3 -import tempfile -import importlib import requests @@ -113,10 +114,14 @@ def scan_xss(url, agent=None, proxy=None): return False, None -def main_xss(start_url, verbose=False, proxy=None, agent=None, tamper=None, batch=False): +def main_xss(start_url, proxy=None, agent=None, **kwargs): """ main attack method to be called """ + batch = kwargs.get("batch", False) + tamper = kwargs.get("tamper", None) + verbose = kwargs.get("verbose", False) + if tamper: lib.core.settings.logger.info(lib.core.settings.set_color( "tampering payloads with '{}'...".format(tamper)