Proxy Support (Resolves #55)

core/config.py

@@ -1,9 +1,12 @@
-changes = '''blind xss support'''
+changes = '''proxy support'''
 
 defaultEditor = 'nano'
 blindPayload = '' # your blind XSS payload
 xsschecker = 'v3dm0s' # A non malicious string to check for reflections and stuff
 
+# More information on adding proxies: http://docs.python-requests.org/en/master/user/advanced/#proxies
+proxies = {'http' : 'http://0.0.0.0:8080', 'https' : 'http://0.0.0.0:8080'}
+
 minEfficiency = 90
 
 delay = 0

core/requester.py

@@ -2,6 +2,7 @@ import time
 import random
 import warnings
 import requests
+import core.config
 
 warnings.filterwarnings('ignore') # Disable SSL related warnings
 
@@ -15,7 +16,7 @@ def requester(url, data, headers, GET, delay, timeout):
     elif headers['User-Agent'] == '$':
         headers['User-Agent'] = random.choice(user_agents)
     if GET:
-        response = requests.get(url, params=data, headers=headers, timeout=timeout, verify=False)
+        response = requests.get(url, params=data, headers=headers, timeout=timeout, verify=False, proxies=core.config.proxies)
     else:
-        response = requests.post(url, data=data, headers=headers, timeout=timeout, verify=False)
+        response = requests.post(url, data=data, headers=headers, timeout=timeout, verify=False, proxies=core.config.proxies)
     return response

xsstrike.py

@@ -49,6 +49,7 @@ parser.add_argument('-e', '--encode', help='encode payloads', dest='encode')
 parser.add_argument('--fuzzer', help='fuzzer', dest='fuzz', action='store_true')
 parser.add_argument('--update', help='update', dest='update', action='store_true')
 parser.add_argument('--timeout', help='timeout', dest='timeout', type=int)
+parser.add_argument('--proxy', help='use prox(y|ies)', dest='proxy', action='store_true')
 parser.add_argument('--params', help='find params', dest='find', action='store_true')
 parser.add_argument('--crawl', help='crawl', dest='recursive', action='store_true')
 parser.add_argument('-f', '--file', help='load payloads from a file', dest='file')
@@ -94,6 +95,9 @@ if encode:
     if encode == 'base64':
         encoding = base64
 
+if not args.proxy:
+    core.config.proxies = {}
+
 if args.update: # if the user has supplied --update argument
     updater()
     quit() # quitting because files have been changed