stable release

This commit is contained in:
Somdev Sangwan
2018-11-10 17:54:23 +05:30
committed by GitHub
parent bff5e54b4c
commit c9e923bb86

View File

@@ -4,16 +4,16 @@ from core.requester import requester
from core.colors import good, info, green, end
from core.config import blindParams, xsschecker, threadCount
def checky(param, paraNames, url, headers, GET, delay):
def checky(param, paraNames, url, headers, GET, delay, timeout):
if param not in paraNames:
response = requester(url, {param : xsschecker}, headers, GET, delay, timeout).text
if '\'%s\'' % xsschecker in response or '"%s"' % xsschecker in response or ' %s ' % xsschecker in response:
paraNames[param] = ''
print('%s Valid parameter found : %s%s%s' % (good, green, param, end))
def arjun(url, GET, headers, delay):
def arjun(url, GET, headers, delay, timeout):
paraNames = {}
response = requester(url, {}, headers, GET, delay).text
response = requester(url, {}, headers, GET, delay, timeout).text
matches = re.findall(r'<input.*?name=\'(.*?)\'.*?>|<input.*?name="(.*?)".*?>', response)
for match in matches:
try:
@@ -25,7 +25,7 @@ def arjun(url, GET, headers, delay):
blindParams.remove(foundParam)
blindParams.insert(0, foundParam)
threadpool = concurrent.futures.ThreadPoolExecutor(max_workers=threadCount)
futures = (threadpool.submit(checky, param, paraNames, url, headers, GET, delay) for param in blindParams)
futures = (threadpool.submit(checky, param, paraNames, url, headers, GET, delay, timeout) for param in blindParams)
for i, _ in enumerate(concurrent.futures.as_completed(futures)):
if i + 1 == len(blindParams) or (i + 1) % threadCount == 0:
print('%s Progress: %i/%i' % (info, i + 1, len(blindParams)), end='\r')