Dan McInerney
|
27d40716cb
|
removed lots of code from xss_spider.py
|
2014-09-08 05:27:03 -04:00 |
|
Dan McInerney
|
7273a2aa1e
|
minor readme and log update
|
2014-09-08 05:17:39 -04:00 |
|
Dan McInerney
|
7397ad8f7d
|
now sends 1 request per form input
|
2014-09-08 05:10:10 -04:00 |
|
Dan McInerney
|
85907da7be
|
tons of changes, better logic, less false positives
|
2014-09-07 02:14:39 -04:00 |
|
Dan McInerney
|
63d753d802
|
improved regex match:lxml match lineup
|
2014-09-02 07:02:11 -04:00 |
|
Dan McInerney
|
b9db77a630
|
66/66 wavsep detection rate!!
|
2014-09-01 06:28:53 -04:00 |
|
Dan McInerney
|
7de4eb2277
|
quote finder logic improvement
|
2014-08-31 12:13:37 -04:00 |
|
Dan McInerney
|
c9a8e41cb6
|
fixed bug in quote parser
|
2014-08-31 11:52:30 -04:00 |
|
Dan McInerney
|
566b4c68f0
|
fixed a quote parsing bug
|
2014-08-31 11:47:23 -04:00 |
|
Dan McInerney
|
c022e3442d
|
remove file
|
2014-08-31 10:46:36 -04:00 |
|
DanMcInerney
|
a3f17250ba
|
Merge pull request #7 from chadillac/master
Added shell script for use in /usr/bin/
|
2014-08-31 10:35:54 -04:00 |
|
Dan McInerney
|
9eed7e11dc
|
huge logic improvement, but this is just cleanup
|
2014-08-31 06:29:56 -04:00 |
|
Dan McInerney
|
e322eb5cae
|
HUGE logic improvement
|
2014-08-31 06:22:50 -04:00 |
|
Chad Seaman
|
7a58800fbb
|
Added shell script for use in /usr/bin/ to make calling xsscrapy easy from everywhere on the system
|
2014-08-26 12:12:03 -07:00 |
|
Dan McInerney
|
8a61b888d7
|
better UA payloading logic, added html comment xss testing
|
2014-08-26 05:51:32 -04:00 |
|
Dan McInerney
|
5792a18dde
|
replaced hostname with netloc
|
2014-08-26 03:14:15 -04:00 |
|
Dan McInerney
|
c5733f40e4
|
added iframe support
|
2014-08-25 08:30:26 -04:00 |
|
Dan McInerney
|
82a5493937
|
removed unnecessary lib ipython
|
2014-08-25 05:57:14 -04:00 |
|
Dan McInerney
|
ab197761e9
|
minor changes
|
2014-08-24 08:00:49 -04:00 |
|
Dan McInerney
|
8f33cd5628
|
until urls are not URL-encoded, taking away encoded payloads
|
2014-08-24 07:58:48 -04:00 |
|
Dan McInerney
|
7789127d18
|
Cookie XSS testing working!! Finally.
|
2014-08-24 06:08:35 -04:00 |
|
DanMcInerney
|
e1c14a1a78
|
Merge pull request #5 from orgkhnargh/look_improvements
Look improvements
|
2014-08-22 17:12:51 -04:00 |
|
Dmytro Kyrychuk
|
144897b94e
|
updated requirements installing guide
|
2014-08-22 19:59:34 +03:00 |
|
Dmytro Kyrychuk
|
f8607266b4
|
Create requirements.txt
|
2014-08-22 19:58:34 +03:00 |
|
Dmytro Kyrychuk
|
2c92365aa2
|
Update README.md
Made readme look prettier
|
2014-08-22 19:56:29 +03:00 |
|
Dan McInerney
|
ad9951c94d
|
format
|
2014-08-22 06:16:52 -04:00 |
|
Dan McInerney
|
525bc14ff1
|
XSS vulnerable test pages updated
|
2014-08-22 06:09:57 -04:00 |
|
Dan McInerney
|
45c1dc457c
|
XSS vulnerable test pages updated
|
2014-08-22 06:09:35 -04:00 |
|
Dan McInerney
|
7df09d1747
|
dependencies
|
2014-08-22 05:50:17 -04:00 |
|
DanMcInerney
|
2571f7740c
|
Merge pull request #4 from yasoob/patch-1
Update README.md
|
2014-08-22 05:47:42 -04:00 |
|
Dan McInerney
|
a60b66f993
|
getting closer to cookie xss detection...
|
2014-08-22 05:46:57 -04:00 |
|
Dan McInerney
|
472feea8bb
|
getting closer to cookie xss injection working
|
2014-08-21 09:59:49 -04:00 |
|
Dan McInerney
|
415f7b072c
|
getting closer to testing for cookie xss
|
2014-08-21 09:56:48 -04:00 |
|
M.Yasoob Ullah Khalid ☺
|
22274587c3
|
Update README.md
Added a FAQ section with the first FAQ
|
2014-08-21 16:37:26 +05:00 |
|
Dan McInerney
|
88030e38c4
|
license
|
2014-08-20 18:28:17 -04:00 |
|
Dan McInerney
|
7aa88291d1
|
bunch of small changes
|
2014-08-20 07:38:17 -04:00 |
|
Dan McInerney
|
080d5c1632
|
moved some functions between spider and pipeline
|
2014-08-19 04:48:55 -04:00 |
|
Dan McInerney
|
30154795c3
|
rmed unnecessary files
|
2014-08-19 04:40:40 -04:00 |
|
Dan McInerney
|
ffcff46536
|
improved xss-testing payload and logic
|
2014-08-19 04:29:44 -04:00 |
|
Dan McInerney
|
e9e7826190
|
improved xss-testing payload and logic
|
2014-08-19 04:29:31 -04:00 |
|
Dan McInerney
|
350cc15a7e
|
improved xss-testing payload and logic
|
2014-08-19 04:28:57 -04:00 |
|
Dan McInerney
|
30c3360f6f
|
added test for XSS at end of url
|
2014-08-18 06:33:43 -04:00 |
|
DanMcInerney
|
dc5dd8ae09
|
took out URL encoding because its rarely useful
|
2014-08-14 07:48:36 -04:00 |
|
DanMcInerney
|
2287da4725
|
made UA and referer header testing into one request
|
2014-08-14 03:05:36 -04:00 |
|
DanMcInerney
|
65bd754d0c
|
small cleanup
|
2014-08-13 02:34:00 -04:00 |
|
DanMcInerney
|
e762d0ca3e
|
readme
|
2014-08-12 10:19:16 -04:00 |
|
DanMcInerney
|
38739287ff
|
quotes
|
2014-08-12 09:27:34 -04:00 |
|
DanMcInerney
|
659ef89faa
|
Added Bloom filtering, much easier on memory
|
2014-08-05 06:53:55 -04:00 |
|
DanMcInerney
|
f4cf5cbc20
|
Fixed UA
|
2014-08-03 05:50:12 -04:00 |
|
DanMcInerney
|
499d9b590d
|
took out cookie payloads due to abberrant behavior and low impact
|
2014-07-31 06:34:42 -04:00 |
|