prehistoric-systems/Zeus-Scanner
1
0
Fork 0
mirror of https://github.com/Ekultek/Zeus-Scanner.git synced 2026-03-11 08:55:51 +00:00
Code Issues Projects Releases Packages Wiki Activity Actions

minor tweak to output colors, when run in batch will not prompt if you want to save the URL's, will just delete them

Browse source
This commit is contained in:
ekultek 2017-11-08 20:02:51 -06:00
parent 769f4c5dc6
commit 65744104f3
1 changed files with 10 additions and 7 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

17
lib/attacks/xss_scan/__init__.py
View file

@ -122,7 +122,7 @@ def scan_xss(url, agent=None, proxy=None):
return False, None return False, None
def main_xss(start_url, verbose=False, proxy=None, agent=None, tamper=None): def main_xss(start_url, verbose=False, proxy=None, agent=None, tamper=None, batch=False):
""" """
main attack method to be called main attack method to be called
""" """
@ -144,7 +144,7 @@ def main_xss(start_url, verbose=False, proxy=None, agent=None, tamper=None):
)) ))
filename = create_urls(start_url, payloads, tamper=tamper) filename = create_urls(start_url, payloads, tamper=tamper)
logger.info(set_color( logger.info(set_color(
"loaded URL's have been saved to '{}'...".format(filename) "loaded URL's have been saved to '{}'...".format(filename), level=25
)) ))
logger.info(set_color( logger.info(set_color(
"testing for XSS vulnerabilities on host '{}'...".format(start_url) "testing for XSS vulnerabilities on host '{}'...".format(start_url)
@ -191,15 +191,18 @@ def main_xss(start_url, verbose=False, proxy=None, agent=None, tamper=None):
)) ))
if len(success) != 0: if len(success) != 0:
logger.info(set_color( logger.info(set_color(
"possible XSS scripts to be used:" "possible XSS scripts to be used:", level=25
)) ))
create_tree(start_url, list(success)) create_tree(start_url, list(success))
else: else:
logger.error(set_color( logger.error(set_color(
"host '{}' does not appear to be vulnerable to XSS attacks...".format(start_url) "host '{}' does not appear to be vulnerable to XSS attacks...".format(start_url)
)) ))
save = prompt( if not batch:
"would you like to keep the URL's saved for further testing", opts="yN" save = prompt(
) "would you like to keep the URL's saved for further testing", opts="yN"
if save.lower().startswith("n"): )
if save.lower().startswith("n"):
os.remove(filename)
else:
os.remove(filename) os.remove(filename)