Exemplo n.º 1
0
"""

import requests
import re
import time
from lib.db_operation import db_query, update_scan_result, fetch_request, get_request_info, is_checked_vulnerable, fetch_exclusion_scan, get_scan_exclusion_info, fetch_exclusion_cookie, get_cookie_exclusion_info
from lib.utils import highlight
from lib.hack_requests import HackRequests

# Define Lib for HackRequests class
LIB_1 = 'PHANTOMJS'
LIB_2 = 'REQUESTS'

# Fetch the exclusions for cookie parameters from database
cookie_exclusion = get_cookie_exclusion_info(fetch_exclusion_cookie()[0])

# Load payloads from file into a list for scan
payloads = []
lines = open('payloads/xss.txt', 'rb')
for line in lines:
    payloads.append(line.strip())
lines.close()


def verify_xss(rhtml, verification):
    if verification in rhtml:
        result = 'vulnerable'
    else:
        result = 'not vulnerable'
    return result
Exemplo n.º 2
0
"""

import requests
import re
import time
from lib.db_operation import db_query, update_scan_result, fetch_request, get_request_info, is_checked_vulnerable, fetch_exclusion_scan, get_scan_exclusion_info, fetch_exclusion_cookie, get_cookie_exclusion_info
from lib.utils import highlight
from lib.hack_requests import HackRequests


# Define Lib for HackRequests class
LIB = 'REQUESTS'

# Fetch the exclusions for cookie parameters from database
cookie_exclusion = get_cookie_exclusion_info(fetch_exclusion_cookie()[0])

# Load payloads from file into a list for scan
payloads = []
lines = open('payloads/fi.txt','rb')
for line in lines:
    payloads.append(line.strip())
lines.close()

# Load verifications from file into a list for scan
verifications = []
verify_file = open('payloads/fi_verify.txt','rb')
for line in verify_file:
    verifications.append(line.strip())
verify_file.close()