XSpear 1.3.1 → 1.3.2

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a4135e5124b742659bf18cac9ebf4af9d7ec8ee799530d6ab9ed4e283c1911a9
4
- data.tar.gz: a5f32df20d58ce0d20d9b1fad4cc9f81191d74a97b331da64f0abfd234c88f07
3
+ metadata.gz: a5509ad9faf3e3689008c91b536685ecf6d381cacf3382ab93387273b3da5537
4
+ data.tar.gz: '09badc210487ad6720523817cd512c3757dcb898d33526e9fa8559807e376f21'
5
5
  SHA512:
6
- metadata.gz: 10cefd5c92976be2e6b7f6d83133321c54cad14801a12fae48505eff599d7559d6ba1ddae1a4ad893548469fd79c51a94cd16db9f27e37774da5b4ee0e79b3b0
7
- data.tar.gz: e7e0baa79f8c09c3acc0b7c57c222e8ccc2d3a00a49508d3603a2efb93e87b5ca3b0424085fc878d1670598d3d75a7e7b12d3fafbe4cdfa5813ccc7272ba4bf7
6
+ metadata.gz: 1b517090b2b2295599a4889e3fba362c84ef9bb048bf3f947e1b0c4661aa3f7d142c37b3156bcd74e57ecdcc76671a3c879f5f0a11bd5aef4cdc90f5ce1bb475
7
+ data.tar.gz: a39bcd1f637368502cc84deb85d5934f7979de5ed1cada889c9ee6b2ead14dcfc001f0475c6a4178d6e84f23d8052684d9cf668fbeb5fd4a82887efcec032cf5
data/.idea/workspace.xml CHANGED
@@ -3,7 +3,7 @@
3
3
  <component name="ChangeListManager">
4
4
  <list default="true" id="4ee2e581-45d7-4c90-b6a1-e92e4b5829dd" name="Default Changelist" comment="">
5
5
  <change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
6
- <change beforePath="$PROJECT_DIR$/XSpear.gemspec" beforeDir="false" afterPath="$PROJECT_DIR$/XSpear.gemspec" afterDir="false" />
6
+ <change beforePath="$PROJECT_DIR$/lib/XSpear.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear.rb" afterDir="false" />
7
7
  <change beforePath="$PROJECT_DIR$/lib/XSpear/version.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear/version.rb" afterDir="false" />
8
8
  </list>
9
9
  <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
@@ -20,7 +20,7 @@
20
20
  <file pinned="false" current-in-tab="false">
21
21
  <entry file="file://$PROJECT_DIR$/exe/XSpear">
22
22
  <provider selected="true" editor-type-id="text-editor">
23
- <state relative-caret-position="489">
23
+ <state relative-caret-position="900">
24
24
  <caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
25
25
  </state>
26
26
  </provider>
@@ -30,37 +30,28 @@
30
30
  <entry file="file://$PROJECT_DIR$/README.md">
31
31
  <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
32
32
  <state split_layout="SPLIT">
33
- <first_editor relative-caret-position="6480">
34
- <caret line="432" column="38" selection-start-line="432" selection-start-column="38" selection-end-line="432" selection-end-column="38" />
33
+ <first_editor relative-caret-position="6525">
34
+ <caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
35
35
  </first_editor>
36
36
  <second_editor />
37
37
  </state>
38
38
  </provider>
39
39
  </entry>
40
40
  </file>
41
- <file pinned="false" current-in-tab="false">
42
- <entry file="file://$PROJECT_DIR$/config.json">
43
- <provider selected="true" editor-type-id="text-editor">
44
- <state relative-caret-position="105">
45
- <caret line="7" column="13" selection-end-line="8" selection-end-column="1" />
46
- </state>
47
- </provider>
48
- </entry>
49
- </file>
50
41
  <file pinned="false" current-in-tab="false">
51
42
  <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
52
43
  <provider selected="true" editor-type-id="text-editor">
53
- <state relative-caret-position="28">
44
+ <state relative-caret-position="1095">
54
45
  <caret line="73" selection-start-line="73" selection-end-line="73" />
55
46
  </state>
56
47
  </provider>
57
48
  </entry>
58
49
  </file>
59
- <file pinned="false" current-in-tab="false">
50
+ <file pinned="false" current-in-tab="true">
60
51
  <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
61
52
  <provider selected="true" editor-type-id="text-editor">
62
- <state relative-caret-position="2511">
63
- <caret line="183" selection-start-line="183" selection-end-line="183" />
53
+ <state relative-caret-position="230">
54
+ <caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
64
55
  </state>
65
56
  </provider>
66
57
  </entry>
@@ -80,19 +71,31 @@
80
71
  </entry>
81
72
  </file>
82
73
  <file pinned="false" current-in-tab="false">
83
- <entry file="file://$APPLICATION_HOME_DIR$/rubystubs23/string.rb">
74
+ <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
84
75
  <provider selected="true" editor-type-id="text-editor">
85
- <state relative-caret-position="237">
86
- <caret line="302" column="6" selection-start-line="302" selection-start-column="6" selection-end-line="302" selection-end-column="6" />
76
+ <state relative-caret-position="15">
77
+ <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
87
78
  </state>
88
79
  </provider>
89
80
  </entry>
90
81
  </file>
91
- <file pinned="false" current-in-tab="true">
92
- <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
82
+ <file pinned="false" current-in-tab="false">
83
+ <entry file="file://$PROJECT_DIR$/forBurp/README.md">
84
+ <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
85
+ <state split_layout="SPLIT">
86
+ <first_editor relative-caret-position="105">
87
+ <caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
88
+ </first_editor>
89
+ <second_editor />
90
+ </state>
91
+ </provider>
92
+ </entry>
93
+ </file>
94
+ <file pinned="false" current-in-tab="false">
95
+ <entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
93
96
  <provider selected="true" editor-type-id="text-editor">
94
- <state relative-caret-position="15">
95
- <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
97
+ <state relative-caret-position="375">
98
+ <caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
96
99
  </state>
97
100
  </provider>
98
101
  </entry>
@@ -100,7 +103,7 @@
100
103
  <file pinned="false" current-in-tab="false">
101
104
  <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
102
105
  <provider selected="true" editor-type-id="text-editor">
103
- <state relative-caret-position="539">
106
+ <state relative-caret-position="660">
104
107
  <caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
105
108
  </state>
106
109
  </provider>
@@ -123,6 +126,7 @@
123
126
  <find>not fil</find>
124
127
  <find>EH</find>
125
128
  <find>CSP</find>
129
+ <find>URI::encode</find>
126
130
  </findStrings>
127
131
  </component>
128
132
  <component name="Git.Settings">
@@ -137,16 +141,18 @@
137
141
  <option value="$PROJECT_DIR$/lib/XSpear/log.rb" />
138
142
  <option value="$PROJECT_DIR$/exe/XSpear" />
139
143
  <option value="$PROJECT_DIR$/README.md" />
140
- <option value="$PROJECT_DIR$/lib/XSpear.rb" />
141
144
  <option value="$PROJECT_DIR$/XSpear.gemspec" />
145
+ <option value="$PROJECT_DIR$/forBurp/otwa.sh" />
146
+ <option value="$PROJECT_DIR$/forBurp/README.md" />
147
+ <option value="$PROJECT_DIR$/lib/XSpear.rb" />
142
148
  <option value="$PROJECT_DIR$/lib/XSpear/version.rb" />
143
149
  </list>
144
150
  </option>
145
151
  </component>
146
- <component name="ProjectFrameBounds" extendedState="6">
147
- <option name="x" value="-1879" />
152
+ <component name="ProjectFrameBounds">
153
+ <option name="x" value="-1920" />
148
154
  <option name="y" value="-620" />
149
- <option name="width" value="1036" />
155
+ <option name="width" value="1920" />
150
156
  <option name="height" value="1057" />
151
157
  </component>
152
158
  <component name="ProjectLevelVcsManager" settingsEditedManually="true">
@@ -157,6 +163,7 @@
157
163
  <foldersAlwaysOnTop value="true" />
158
164
  </navigator>
159
165
  <panes>
166
+ <pane id="Scope" />
160
167
  <pane id="ProjectPane">
161
168
  <subPane>
162
169
  <expand>
@@ -194,7 +201,6 @@
194
201
  <select />
195
202
  </subPane>
196
203
  </pane>
197
- <pane id="Scope" />
198
204
  </panes>
199
205
  </component>
200
206
  <component name="PropertiesComponent">
@@ -258,28 +264,9 @@
258
264
  <workItem from="1564151699165" duration="2494000" />
259
265
  <workItem from="1564413097342" duration="11274000" />
260
266
  <workItem from="1574090247432" duration="1799000" />
261
- <workItem from="1577115206395" duration="20845000" />
262
- </task>
263
- <task id="LOCAL-00023" summary="Add show version &amp; edit help, version in banner">
264
- <created>1563646762017</created>
265
- <option name="number" value="00023" />
266
- <option name="presentableId" value="LOCAL-00023" />
267
- <option name="project" value="LOCAL" />
268
- <updated>1563646762017</updated>
269
- </task>
270
- <task id="LOCAL-00024" summary="Edit version , release 1.0.2">
271
- <created>1563646850278</created>
272
- <option name="number" value="00024" />
273
- <option name="presentableId" value="LOCAL-00024" />
274
- <option name="project" value="LOCAL" />
275
- <updated>1563646850278</updated>
276
- </task>
277
- <task id="LOCAL-00025" summary="Add EventHandler Test logic (1.0.3), edit description on report">
278
- <created>1563648949262</created>
279
- <option name="number" value="00025" />
280
- <option name="presentableId" value="LOCAL-00025" />
281
- <option name="project" value="LOCAL" />
282
- <updated>1563648949262</updated>
267
+ <workItem from="1577115206395" duration="21990000" />
268
+ <workItem from="1580314696983" duration="286000" />
269
+ <workItem from="1580583824837" duration="966000" />
283
270
  </task>
284
271
  <task id="LOCAL-00026" summary="verbose가 1일 떄 배너 출력되지 않도록 수정">
285
272
  <created>1563649920055</created>
@@ -603,11 +590,32 @@
603
590
  <option name="project" value="LOCAL" />
604
591
  <updated>1577628652705</updated>
605
592
  </task>
606
- <option name="localTasksCounter" value="72" />
593
+ <task id="LOCAL-00072" summary="(1.3) Fixed dependency bug">
594
+ <created>1577629109580</created>
595
+ <option name="number" value="00072" />
596
+ <option name="presentableId" value="LOCAL-00072" />
597
+ <option name="project" value="LOCAL" />
598
+ <updated>1577629109580</updated>
599
+ </task>
600
+ <task id="LOCAL-00073" summary="(1.3) Fixed dependency bug">
601
+ <created>1577629178860</created>
602
+ <option name="number" value="00073" />
603
+ <option name="presentableId" value="LOCAL-00073" />
604
+ <option name="project" value="LOCAL" />
605
+ <updated>1577629178860</updated>
606
+ </task>
607
+ <task id="LOCAL-00074" summary="XSpear on Burpsuite">
608
+ <created>1577632578176</created>
609
+ <option name="number" value="00074" />
610
+ <option name="presentableId" value="LOCAL-00074" />
611
+ <option name="project" value="LOCAL" />
612
+ <updated>1577632578176</updated>
613
+ </task>
614
+ <option name="localTasksCounter" value="75" />
607
615
  <servers />
608
616
  </component>
609
617
  <component name="TimeTrackingManager">
610
- <option name="totallyTimeSpent" value="72888000" />
618
+ <option name="totallyTimeSpent" value="75285000" />
611
619
  </component>
612
620
  <component name="TodoView">
613
621
  <todo-panel id="selected-file">
@@ -619,10 +627,10 @@
619
627
  </todo-panel>
620
628
  </component>
621
629
  <component name="ToolWindowManager">
622
- <frame x="-1879" y="-620" width="1879" height="1057" extended-state="6" />
630
+ <frame x="-1920" y="-620" width="1920" height="1057" extended-state="0" />
623
631
  <editor active="true" />
624
632
  <layout>
625
- <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.13336962" />
633
+ <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.13578275" />
626
634
  <window_info id="Structure" order="1" side_tool="true" weight="0.25" />
627
635
  <window_info id="Favorites" order="2" side_tool="true" />
628
636
  <window_info anchor="bottom" id="Message" order="0" />
@@ -648,8 +656,6 @@
648
656
  <option name="version" value="1" />
649
657
  </component>
650
658
  <component name="VcsManagerConfiguration">
651
- <MESSAGE value="(1.0.9)[Fixed #13] Remove add pattern from StandardError in 'makeQueryPattern'" />
652
- <MESSAGE value="(1.0.9) Releases 1.0.9 / Add --raw options, code refactoring, fixed bugs" />
653
659
  <MESSAGE value="(1.1.0) [Fixed #14] Edit raw query print code" />
654
660
  <MESSAGE value="(1.1.0) [Fixed #15] makeQueryPattern 내 페이로드 생성 코드 수정" />
655
661
  <MESSAGE value="(1.1.0) Releases 1.1.0 / Fixed bug, modify report format, etc.." />
@@ -673,7 +679,9 @@
673
679
  <MESSAGE value="(1.3) fixed #37 (Added -c --config options)" />
674
680
  <MESSAGE value="(1.3) fixed #40 (Reformating Logs / Verbose 0~4)" />
675
681
  <MESSAGE value="(1.3) Released 1.3.0 +_+" />
676
- <option name="LAST_COMMIT_MESSAGE" value="(1.3) Released 1.3.0 +_+" />
682
+ <MESSAGE value="(1.3) Fixed dependency bug" />
683
+ <MESSAGE value="XSpear on Burpsuite" />
684
+ <option name="LAST_COMMIT_MESSAGE" value="XSpear on Burpsuite" />
677
685
  </component>
678
686
  <component name="editorHistoryManager">
679
687
  <entry file="file://$USER_HOME$/.rvm/gems/ruby-2.4.6/gems/bundler-2.0.1/lib/bundler/rubygems_integration.rb">
@@ -733,19 +741,9 @@
733
741
  </state>
734
742
  </provider>
735
743
  </entry>
736
- <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
737
- <provider selected="true" editor-type-id="text-editor">
738
- <state relative-caret-position="195">
739
- <caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
740
- </state>
741
- </provider>
742
- </entry>
743
- <entry file="file://$PROJECT_DIR$/bin/console">
744
- <provider selected="true" editor-type-id="text-editor" />
745
- </entry>
746
744
  <entry file="file://$PROJECT_DIR$/exe/XSpear">
747
745
  <provider selected="true" editor-type-id="text-editor">
748
- <state relative-caret-position="489">
746
+ <state relative-caret-position="900">
749
747
  <caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
750
748
  </state>
751
749
  </provider>
@@ -753,8 +751,8 @@
753
751
  <entry file="file://$PROJECT_DIR$/README.md">
754
752
  <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
755
753
  <state split_layout="SPLIT">
756
- <first_editor relative-caret-position="6480">
757
- <caret line="432" column="38" selection-start-line="432" selection-start-column="38" selection-end-line="432" selection-end-column="38" />
754
+ <first_editor relative-caret-position="6525">
755
+ <caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
758
756
  </first_editor>
759
757
  <second_editor />
760
758
  </state>
@@ -762,21 +760,41 @@
762
760
  </entry>
763
761
  <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
764
762
  <provider selected="true" editor-type-id="text-editor">
765
- <state relative-caret-position="28">
763
+ <state relative-caret-position="1095">
766
764
  <caret line="73" selection-start-line="73" selection-end-line="73" />
767
765
  </state>
768
766
  </provider>
769
767
  </entry>
770
- <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
768
+ <entry file="file://$PROJECT_DIR$/bin/console">
769
+ <provider selected="true" editor-type-id="text-editor" />
770
+ </entry>
771
+ <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
771
772
  <provider selected="true" editor-type-id="text-editor">
772
- <state relative-caret-position="2511">
773
- <caret line="183" selection-start-line="183" selection-end-line="183" />
773
+ <state relative-caret-position="195">
774
+ <caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
775
+ </state>
776
+ </provider>
777
+ </entry>
778
+ <entry file="file://$PROJECT_DIR$/forBurp/README.md">
779
+ <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
780
+ <state split_layout="SPLIT">
781
+ <first_editor relative-caret-position="105">
782
+ <caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
783
+ </first_editor>
784
+ <second_editor />
785
+ </state>
786
+ </provider>
787
+ </entry>
788
+ <entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
789
+ <provider selected="true" editor-type-id="text-editor">
790
+ <state relative-caret-position="375">
791
+ <caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
774
792
  </state>
775
793
  </provider>
776
794
  </entry>
777
795
  <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
778
796
  <provider selected="true" editor-type-id="text-editor">
779
- <state relative-caret-position="539">
797
+ <state relative-caret-position="660">
780
798
  <caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
781
799
  </state>
782
800
  </provider>
@@ -788,5 +806,12 @@
788
806
  </state>
789
807
  </provider>
790
808
  </entry>
809
+ <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
810
+ <provider selected="true" editor-type-id="text-editor">
811
+ <state relative-caret-position="230">
812
+ <caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
813
+ </state>
814
+ </provider>
815
+ </entry>
791
816
  </component>
792
817
  </project>
data/README.md CHANGED
@@ -314,6 +314,9 @@ result json data
314
314
  ```
315
315
  (Items marked as `triggered` are actually payloads that work in the browser.)
316
316
 
317
+ **XSpear on Burpsuite**<br>
318
+ https://github.com/hahwul/XSpear/tree/master/forBurp
319
+
317
320
  etc...
318
321
 
319
322
  ### Sample log
data/XSpear-1.3.1.gem ADDED
Binary file
data/forBurp/README.md ADDED
@@ -0,0 +1,25 @@
1
+ # XSpear on Burpsuite
2
+ <img src="https://1.bp.blogspot.com/-P_MFaYn37Ps/XgjBrDN41lI/AAAAAAAAEzQ/WQbrkvwfEBYuqYLrotA2CUflMwQ3hEKpACLcBGAsYHQ/s640/1413.png" width=100%>
3
+
4
+ ## Blog post
5
+ https://www.hahwul.com/2019/12/run-other-application-on-burp-suiteburp.html
6
+
7
+ ## Custom Send to
8
+ go to BApp store
9
+
10
+ ## Entries
11
+ ```
12
+ Name: XSpear
13
+ Command: xspear --raw %F -a -b {your-blind-xss-url}
14
+ ```
15
+
16
+ ## Miscellaneous
17
+ ```
18
+ # MacOS
19
+ ~~your-path~~/open_terminal_with_args/otwa.sh %C
20
+
21
+ # Linux
22
+ (default) xterm %C
23
+ ```
24
+
25
+ <img src="https://1.bp.blogspot.com/-WDmUI8QzX-4/XgjAx3TX3sI/AAAAAAAAEyw/YKKC23hLVYQtkBvPl_T7UybSL5RYKi-UwCLcBGAsYHQ/s640/1415.png" width=100%>
data/forBurp/otwa.sh ADDED
@@ -0,0 +1,26 @@
1
+ echo '
2
+ on run argv
3
+ if length of argv is equal to 0
4
+ set command to ""
5
+ else
6
+ set command to item 1 of argv
7
+ end if
8
+ if length of argv is greater than 1
9
+ set profile to item 2 of argv
10
+ runWithProfile(command, profile)
11
+ else
12
+ runSimple(command)
13
+ end if
14
+ end run
15
+ on runSimple(command)
16
+ tell application "Terminal"
17
+ activate
18
+ set newTab to do script(command)
19
+ end tell
20
+ return newTab
21
+ end runSimple
22
+ on runWithProfile(command, profile)
23
+ set newTab to runSimple(command)
24
+ tell application "Terminal" to set current settings of newTab to (first settings set whose name is profile)
25
+ end runWithProfile
26
+ ' | osascript - "$@" > /dev/null
data/lib/XSpear.rb CHANGED
@@ -643,7 +643,7 @@ class XspearScan
643
643
  attack = ""
644
644
  dparams = params
645
645
  dparams.each do |d|
646
- attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI::encode(payload)}" if p[0] == d[0]
646
+ attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
647
647
  #d[1] = p[1] + payload if p[0] == d[0]
648
648
  end
649
649
  result.push("inject": 'url',"param":p[0] ,"type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
@@ -658,7 +658,8 @@ class XspearScan
658
658
  attack = ""
659
659
  dparams = params
660
660
  dparams.each do |d|
661
- attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI::encode(payload)}" if p[0] == d[0]
661
+ attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
662
+ # #45 Issue, URI::encode to URI.encode_www_form_component
662
663
  #d[1] = p[1] + payload if p[0] == d[0]
663
664
  end
664
665
  result.push("inject": 'body', "param":p[0], "type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
@@ -669,10 +670,10 @@ class XspearScan
669
670
  if callback == CallbackXSSSelenium
670
671
  begin
671
672
  puri = URI.parse(@url)
672
- puri.path = puri.path+URI.encode("/"+pattern)
673
+ puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
673
674
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
674
675
  puri = URI.parse(@url)
675
- puri.path = puri.path+URI.encode(pattern)
676
+ puri.path = puri.path+URI.encode_www_form_component(pattern)
676
677
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
677
678
  rescue
678
679
  # bypass
@@ -686,10 +687,10 @@ class XspearScan
686
687
  if callback == CallbackXSSSelenium
687
688
  begin
688
689
  puri = URI.parse(@url)
689
- puri.path = puri.path+URI.encode("/"+pattern)
690
+ puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
690
691
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
691
692
  puri = URI.parse(@url)
692
- puri.path = puri.path+URI.encode(pattern)
693
+ puri.path = puri.path+URI.encode_www_form_component(pattern)
693
694
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
694
695
  rescue
695
696
  # bypass
@@ -1,3 +1,3 @@
1
1
  module XSpear
2
- VERSION = "1.3.1"
2
+ VERSION = "1.3.2"
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: XSpear
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.3.1
4
+ version: 1.3.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - hahwul
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-12-29 00:00:00.000000000 Z
11
+ date: 2020-02-01 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: colorize
@@ -186,11 +186,14 @@ files:
186
186
  - LICENSE.txt
187
187
  - README.md
188
188
  - Rakefile
189
+ - XSpear-1.3.1.gem
189
190
  - XSpear.gemspec
190
191
  - bin/console
191
192
  - bin/setup
192
193
  - config.json
193
194
  - exe/XSpear
195
+ - forBurp/README.md
196
+ - forBurp/otwa.sh
194
197
  - lib/XSpear.rb
195
198
  - lib/XSpear/XSpearRepoter.rb
196
199
  - lib/XSpear/banner.rb