RubyGems - XSpear - Versions diffs - 1.0.0 → 1.0.1 - Mend

XSpear 1.0.0 → 1.0.1

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.

Files changed (8) hide show

checksums.yaml CHANGED Viewed

@@ -1,7 +1,7 @@
 ---
 SHA256:
-  metadata.gz: 78518c002289b75972864ee98408eeaa2fdf67e8dc11b8060cc27d4bf14ddd18
-  data.tar.gz: 325a901906a3864ad9a2e69553bcd0e8a0e026852595aef8cb157afdeecdde7e
+  metadata.gz: 7972c77531071581bfeac03c4faa63681075b0668611f6fdd767030eaa7450c9
+  data.tar.gz: e22b692ea493fc780d6c53d013aff1d63af28330134dc5f20cf406ae2989f569
 SHA512:
-  metadata.gz: a6928661c2d76c5121e941929f51695f016ffb83bba3168e6c5b5cb46e9f6c9f393eb849c3d671a046e131b0d9a9fbb7825ccbe9ad08a54a55b72926b4ae0d84
-  data.tar.gz: cf81d9c95865ed8d868f9182985f4868c6c539e47546143edc596bf3944db3f261c5f477c39ec79a766c08b144f486913712045fa4fae207e18c98f6a4e95f10
+  metadata.gz: b86422a360efa39f2da6ed64d77a8b051fb3c2e225d1d82d92cf963410c4234de35dad51867222d56d1d9764b75bccab5b86205095b3336553016acaf9c65584
+  data.tar.gz: 0bb40ccb370cdc42453d31136123ba0a0d076dbe8274dc8ec6fce6419405341ed65cca15f583610ad75c46271655aea49d927508f667289366c545dddb6247d8

data/.idea/XSpear.iml CHANGED Viewed

@@ -13,5 +13,7 @@
     <orderEntry type="library" scope="PROVIDED" name="rake (v12.3.2, ruby-2.3.7-p456) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="rubyzip (v1.2.3, ruby-2.3.7-p456) [gem]" level="application" />
     <orderEntry type="library" scope="PROVIDED" name="selenium-webdriver (v3.142.3, ruby-2.3.7-p456) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="terminal-table (v1.8.0, ruby-2.3.7-p456) [gem]" level="application" />
+    <orderEntry type="library" scope="PROVIDED" name="unicode-display_width (v1.6.0, ruby-2.3.7-p456) [gem]" level="application" />
   </component>
 </module>

data/.idea/workspace.xml CHANGED Viewed

@@ -4,10 +4,9 @@
     <list default="true" id="4ee2e581-45d7-4c90-b6a1-e92e4b5829dd" name="Default Changelist" comment="">
       <change beforePath="$PROJECT_DIR$/.idea/XSpear.iml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/XSpear.iml" afterDir="false" />
       <change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
+      <change beforePath="$PROJECT_DIR$/XSpear-1.0.0.gem" beforeDir="false" />
       <change beforePath="$PROJECT_DIR$/XSpear.gemspec" beforeDir="false" afterPath="$PROJECT_DIR$/XSpear.gemspec" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/exe/XSpear" beforeDir="false" afterPath="$PROJECT_DIR$/exe/XSpear" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/lib/XSpear.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear.rb" afterDir="false" />
-      <change beforePath="$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb" afterDir="false" />
+      <change beforePath="$PROJECT_DIR$/lib/XSpear/version.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear/version.rb" afterDir="false" />
     </list>
     <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
     <option name="SHOW_DIALOG" value="false" />
@@ -19,25 +18,16 @@
     <SUITE FILE_PATH="coverage/XSpear@XSpear.rcov" NAME="XSpear Coverage Results" MODIFIED="1562943092281" SOURCE_PROVIDER="com.intellij.coverage.DefaultCoverageFileProvider" RUNNER="rcov" COVERAGE_BY_TEST_ENABLED="true" COVERAGE_TRACING_ENABLED="false" WORKING_DIRECTORY="$PROJECT_DIR$/lib" MODULE_NAME="XSpear" />
   </component>
   <component name="FileEditorManager">
-    <leaf>
-      <file pinned="false" current-in-tab="false">
-        <entry file="file://$PROJECT_DIR$/exe/XSpear">
-          <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="448">
-              <caret line="66" column="3" selection-start-line="66" selection-start-column="3" selection-end-line="66" selection-end-column="3" />
-            </state>
-          </provider>
-        </entry>
-      </file>
+    <leaf SIDE_TABS_SIZE_LIMIT_KEY="300">
       <file pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/bin/console">
           <provider selected="true" editor-type-id="text-editor" />
         </entry>
       </file>
-      <file pinned="false" current-in-tab="true">
+      <file pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="414">
+            <state relative-caret-position="1740">
               <caret line="116" column="19" selection-start-line="116" selection-start-column="19" selection-end-line="116" selection-end-column="19" />
             </state>
           </provider>
@@ -47,8 +37,8 @@
         <entry file="file://$PROJECT_DIR$/README.md">
           <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
             <state split_layout="SPLIT">
-              <first_editor relative-caret-position="150">
-                <caret line="10" column="36" selection-start-line="10" selection-start-column="36" selection-end-line="10" selection-end-column="36" />
+              <first_editor relative-caret-position="135">
+                <caret line="9" column="29" selection-start-line="9" selection-start-column="29" selection-end-line="9" selection-end-column="29" />
               </first_editor>
               <second_editor />
             </state>
@@ -63,8 +53,8 @@
       <file pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="692">
-              <caret line="66" column="24" selection-start-line="66" selection-start-column="24" selection-end-line="66" selection-end-column="24" />
+            <state>
+              <caret column="9" selection-start-column="9" selection-end-column="23" />
             </state>
           </provider>
         </entry>
@@ -87,11 +77,11 @@
           </provider>
         </entry>
       </file>
-      <file pinned="false" current-in-tab="false">
+      <file pinned="false" current-in-tab="true">
         <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="45">
-              <caret line="3" selection-start-line="3" selection-end-line="3" />
+            <state relative-caret-position="15">
+              <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
             </state>
           </provider>
         </entry>
@@ -99,12 +89,17 @@
       <file pinned="false" current-in-tab="false">
         <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
           <provider selected="true" editor-type-id="text-editor">
-            <state relative-caret-position="32">
-              <caret line="10" lean-forward="true" selection-start-line="10" selection-end-line="10" />
+            <state relative-caret-position="585">
+              <caret line="39" lean-forward="true" selection-start-line="39" selection-end-line="39" />
             </state>
           </provider>
         </entry>
       </file>
+      <file pinned="false" current-in-tab="false">
+        <entry file="file:///usr/local/bin/rake">
+          <provider selected="true" editor-type-id="text-editor" />
+        </entry>
+      </file>
     </leaf>
   </component>
   <component name="Git.Settings">
@@ -115,18 +110,18 @@
       <list>
         <option value="$PROJECT_DIR$/lib/XSpear/log.rb" />
         <option value="$PROJECT_DIR$/lib/XSpear/banner.rb" />
-        <option value="$PROJECT_DIR$/README.md" />
-        <option value="$PROJECT_DIR$/lib/XSpear/version.rb" />
         <option value="$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb" />
         <option value="$PROJECT_DIR$/exe/XSpear" />
-        <option value="$PROJECT_DIR$/XSpear.gemspec" />
         <option value="$PROJECT_DIR$/lib/XSpear.rb" />
+        <option value="$PROJECT_DIR$/README.md" />
+        <option value="$PROJECT_DIR$/XSpear.gemspec" />
+        <option value="$PROJECT_DIR$/lib/XSpear/version.rb" />
       </list>
     </option>
   </component>
   <component name="ProjectFrameBounds" extendedState="6">
-    <option name="x" value="-1930" />
-    <option name="y" value="-612" />
+    <option name="x" value="-1794" />
+    <option name="y" value="-594" />
     <option name="width" value="1920" />
     <option name="height" value="1057" />
   </component>
@@ -138,6 +133,7 @@
       <foldersAlwaysOnTop value="true" />
     </navigator>
     <panes>
+      <pane id="Scope" />
       <pane id="ProjectPane">
         <subPane>
           <expand>
@@ -175,7 +171,6 @@
           <select />
         </subPane>
       </pane>
-      <pane id="Scope" />
     </panes>
   </component>
   <component name="PropertiesComponent">
@@ -232,7 +227,8 @@
       <option name="number" value="Default" />
       <option name="presentableId" value="Default" />
       <updated>1562942814778</updated>
-      <workItem from="1562942816004" duration="13642000" />
+      <workItem from="1562942816004" duration="15337000" />
+      <workItem from="1563638656518" duration="215000" />
     </task>
     <task id="LOCAL-00001" summary="init update">
       <created>1562945899597</created>
@@ -346,24 +342,48 @@
       <option name="project" value="LOCAL" />
       <updated>1563464234805</updated>
     </task>
-    <option name="localTasksCounter" value="17" />
+    <task id="LOCAL-00017" summary="1.0.0 Final commit">
+      <created>1563553596470</created>
+      <option name="number" value="00017" />
+      <option name="presentableId" value="LOCAL-00017" />
+      <option name="project" value="LOCAL" />
+      <updated>1563553596470</updated>
+    </task>
+    <task id="LOCAL-00018" summary="Edit readme">
+      <created>1563554102958</created>
+      <option name="number" value="00018" />
+      <option name="presentableId" value="LOCAL-00018" />
+      <option name="project" value="LOCAL" />
+      <updated>1563554102958</updated>
+    </task>
+    <task id="LOCAL-00019" summary="modify dependency rspec">
+      <created>1563555157935</created>
+      <option name="number" value="00019" />
+      <option name="presentableId" value="LOCAL-00019" />
+      <option name="project" value="LOCAL" />
+      <updated>1563555157935</updated>
+    </task>
+    <task id="LOCAL-00020" summary="modify dependency rspec">
+      <created>1563555198677</created>
+      <option name="number" value="00020" />
+      <option name="presentableId" value="LOCAL-00020" />
+      <option name="project" value="LOCAL" />
+      <updated>1563555198677</updated>
+    </task>
+    <option name="localTasksCounter" value="21" />
     <servers />
   </component>
   <component name="TimeTrackingManager">
-    <option name="totallyTimeSpent" value="13642000" />
+    <option name="totallyTimeSpent" value="15552000" />
   </component>
   <component name="ToolWindowManager">
-    <frame x="-1930" y="-612" width="1920" height="1057" extended-state="6" />
+    <frame x="-1920" y="-620" width="1920" height="1057" extended-state="6" />
     <editor active="true" />
     <layout>
-      <window_info id="Favorites" side_tool="true" />
-      <window_info content_ui="combo" id="Project" order="0" visible="true" weight="0.15921193" />
+      <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.16080937" />
       <window_info id="Structure" order="1" side_tool="true" weight="0.25" />
-      <window_info anchor="bottom" id="Docker" show_stripe_button="false" />
-      <window_info anchor="bottom" id="Database Changes" />
-      <window_info anchor="bottom" id="Version Control" />
-      <window_info active="true" anchor="bottom" id="Terminal" visible="true" weight="0.29637307" />
-      <window_info anchor="bottom" id="Event Log" side_tool="true" />
+      <window_info id="Favorites" order="2" side_tool="true" />
+      <window_info anchor="bottom" id="Messages" weight="0.32953367" />
       <window_info anchor="bottom" id="Message" order="0" />
       <window_info anchor="bottom" id="Find" order="1" />
       <window_info anchor="bottom" id="Run" order="2" weight="0.32953367" />
@@ -371,10 +391,15 @@
       <window_info anchor="bottom" id="Cvs" order="4" weight="0.25" />
       <window_info anchor="bottom" id="Inspection" order="5" weight="0.4" />
       <window_info anchor="bottom" id="TODO" order="6" />
-      <window_info anchor="right" id="Database" />
+      <window_info anchor="bottom" id="Docker" order="7" show_stripe_button="false" />
+      <window_info anchor="bottom" id="Database Changes" order="8" />
+      <window_info anchor="bottom" id="Version Control" order="9" />
+      <window_info anchor="bottom" id="Terminal" order="10" visible="true" weight="0.29637307" />
+      <window_info anchor="bottom" id="Event Log" order="11" side_tool="true" />
       <window_info anchor="right" id="Commander" internal_type="SLIDING" order="0" type="SLIDING" weight="0.4" />
       <window_info anchor="right" id="Ant Build" order="1" weight="0.25" />
       <window_info anchor="right" content_ui="combo" id="Hierarchy" order="2" weight="0.25" />
+      <window_info anchor="right" id="Database" order="3" />
     </layout>
   </component>
   <component name="TypeScriptGeneratedFilesManager">
@@ -385,13 +410,15 @@
     <MESSAGE value="build gem and edit dependency" />
     <MESSAGE value="add gem &amp; edit code" />
     <MESSAGE value="edit gem dependency(runtime, developement)" />
-    <MESSAGE value="Edit readme" />
     <MESSAGE value="Add json report and new build binary, edit readme" />
     <MESSAGE value="Add screenshot images" />
     <MESSAGE value="Add dependency gems descriptions" />
     <MESSAGE value="Add cli banner" />
     <MESSAGE value="Edit Selenium code &amp; README, Change version" />
-    <option name="LAST_COMMIT_MESSAGE" value="Edit Selenium code &amp; README, Change version" />
+    <MESSAGE value="1.0.0 Final commit" />
+    <MESSAGE value="Edit readme" />
+    <MESSAGE value="modify dependency rspec" />
+    <option name="LAST_COMMIT_MESSAGE" value="modify dependency rspec" />
   </component>
   <component name="editorHistoryManager">
     <entry file="file://$USER_HOME$/.rvm/gems/ruby-2.4.6/gems/bundler-2.0.1/lib/bundler/rubygems_integration.rb">
@@ -401,68 +428,71 @@
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/bin/setup">
-      <provider selected="true" editor-type-id="text-editor" />
-    </entry>
-    <entry file="file://$PROJECT_DIR$/bin/console">
-      <provider selected="true" editor-type-id="text-editor" />
-    </entry>
-    <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
+    <entry file="file://$PROJECT_DIR$/exe/XSpear">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="195">
-          <caret line="13" column="19" selection-start-line="13" selection-start-column="11" selection-end-line="13" selection-end-column="19" />
+        <state relative-caret-position="990">
+          <caret line="66" column="3" selection-start-line="66" selection-start-column="3" selection-end-line="66" selection-end-column="3" />
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/lib/XSpear/banner.rb">
-      <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="195">
-          <caret line="13" column="3" selection-start-line="13" selection-start-column="3" selection-end-line="13" selection-end-column="3" />
-        </state>
-      </provider>
+    <entry file="file://$PROJECT_DIR$/bin/console">
+      <provider selected="true" editor-type-id="text-editor" />
     </entry>
-    <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
+    <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="45">
-          <caret line="3" selection-start-line="3" selection-end-line="3" />
+        <state relative-caret-position="1740">
+          <caret line="116" column="19" selection-start-line="116" selection-start-column="19" selection-end-line="116" selection-end-column="19" />
         </state>
       </provider>
     </entry>
     <entry file="file://$PROJECT_DIR$/README.md">
       <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
         <state split_layout="SPLIT">
-          <first_editor relative-caret-position="150">
-            <caret line="10" column="36" selection-start-line="10" selection-start-column="36" selection-end-line="10" selection-end-column="36" />
+          <first_editor relative-caret-position="135">
+            <caret line="9" column="29" selection-start-line="9" selection-start-column="29" selection-end-line="9" selection-end-column="29" />
           </first_editor>
           <second_editor />
         </state>
       </provider>
     </entry>
+    <entry file="file://$PROJECT_DIR$/bin/setup">
+      <provider selected="true" editor-type-id="text-editor" />
+    </entry>
     <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="692">
-          <caret line="66" column="24" selection-start-line="66" selection-start-column="24" selection-end-line="66" selection-end-column="24" />
+        <state>
+          <caret column="9" selection-start-column="9" selection-end-column="23" />
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/exe/XSpear">
+    <entry file="file://$PROJECT_DIR$/lib/XSpear/banner.rb">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="448">
-          <caret line="66" column="3" selection-start-line="66" selection-start-column="3" selection-end-line="66" selection-end-column="3" />
+        <state relative-caret-position="195">
+          <caret line="13" column="3" selection-start-line="13" selection-start-column="3" selection-end-line="13" selection-end-column="3" />
+        </state>
+      </provider>
+    </entry>
+    <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
+      <provider selected="true" editor-type-id="text-editor">
+        <state relative-caret-position="195">
+          <caret line="13" column="19" selection-start-line="13" selection-start-column="11" selection-end-line="13" selection-end-column="19" />
         </state>
       </provider>
     </entry>
+    <entry file="file:///usr/local/bin/rake">
+      <provider selected="true" editor-type-id="text-editor" />
+    </entry>
     <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="32">
-          <caret line="10" lean-forward="true" selection-start-line="10" selection-end-line="10" />
+        <state relative-caret-position="585">
+          <caret line="39" lean-forward="true" selection-start-line="39" selection-end-line="39" />
         </state>
       </provider>
     </entry>
-    <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
+    <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
       <provider selected="true" editor-type-id="text-editor">
-        <state relative-caret-position="414">
-          <caret line="116" column="19" selection-start-line="116" selection-start-column="19" selection-end-line="116" selection-end-column="19" />
+        <state relative-caret-position="15">
+          <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
         </state>
       </provider>
     </entry>

data/README.md CHANGED Viewed

@@ -1,18 +1,30 @@
 # XSpear
 XSpear is XSS Scanner on ruby gems
-<img src="https://img.shields.io/static/v1.svg?label=lang&message=ruby&color=RED"> <img src="https://img.shields.io/github/languages/top/hahwul/XSpear.svg"> <img src="https://img.shields.io/static/v1.svg?label=version&message=1.0&color=purple"> <img src="https://img.shields.io/github/license/hahwul/XSpear.svg"> <a href="https://twitter.com/intent/follow?screen_name=hahwul"><img src="https://img.shields.io/static/v1.svg?label=follow&message=hahwul&color=black"></a>
+<img src="https://img.shields.io/static/v1.svg?label=lang&message=ruby&color=RED"> <img src="https://img.shields.io/static/v1.svg?label=version&message=1.0&color=purple"> <img src="https://img.shields.io/gem/dtv/XSpear.svg"> <img src="https://img.shields.io/github/license/hahwul/XSpear.svg"> <a href="https://twitter.com/intent/follow?screen_name=hahwul"><img src="https://img.shields.io/static/v1.svg?label=follow&message=hahwul&color=black"></a>
 ## Key features
 - Pattern matching based XSS scanning
-- Dynamic test based XSS scanning (with Selenium)
+- Detect `alert` `confirm` `prompt` event on headless browser (with Selenium)
 - Testing request/response for XSS protection bypass and reflected params
-- Enable XSpear in code with Gem library load
+- XSpear running on ruby code(with Gem library)
+- Dynamic/Static Analysis(Find SQL Error, etc..)
+- Show table base report and testing raw query(url)
+- Testing at selected parameters
 - Support output format `cli` `json`
+- Support Verbose level (quit / nomal / raw data)
 - Support custom callback code to any test various attack vectors
 ## Installation
+Install it yourself as:
+    $ gem install XSpear
+Or install it yourself as (local file):
+    $ gem install XSpear-0.1.0.gem
 Add this line to your application's Gemfile:
 ```ruby
@@ -23,14 +35,6 @@ And then execute:
     $ bundle
-Or install it yourself as:
-    $ gem install XSpear
-Or install it yourself as (local file):
-    $ gem install XSpear-0.1.0.gem
 ### Dependency gems
 `colorize` `selenium-webdriver`<br>
 If you configured it to install automatically in the Gem library, but it behaves abnormally, install it with the following command.
@@ -45,18 +49,14 @@ $ gem install selenium-webdriver
 ```
 Usage: xspear -u [target] -[options] [value]
 [ e.g ]
-$ xspear -u 'https://www.hahwul.com/?q=123' --cookie='role=admin'
+$ ruby a.rb -u 'https://www.hahwul.com/?q=123' --cookie='role=admin'
 [ Options ]
     -u, --url=target_URL             [required] Target Url
     -d, --data=POST Body             [optional] POST Method Body data
         --headers=HEADERS            [optional] Add HTTP Headers
         --cookie=COOKIE              [optional] Add Cookie
-    -l, --level=1~3                  [optional] Custom scan level
-                                      + Default value: 3
-                                      + Level3
-                                      + Level2
-                                      + Level1:
+    -p, --param=PARAM                [optional] Test paramters
     -t, --threads=NUMBER             [optional] thread , default: 10
     -o, --output=FILENAME            [optional] Save JSON Result
     -v, --verbose=1~3                [optional] Show log depth
@@ -65,8 +65,7 @@ $ xspear -u 'https://www.hahwul.com/?q=123' --cookie='role=admin'
                                       + v=2 : show scanning log
                                       + v=3 : show detail log(req/res)
     -h, --help                       Prints this help
-        --update                     Update with online
+        --update                     Update with online (not supported)
 ```
 ### Case by Case
@@ -85,57 +84,75 @@ $ xspear -u "http://testphp.vulnweb.com/search.php?test=query" -d "searchFor=yy"
 $ xspear -u "http://testphp.vulnweb.com/search.php?test=query" -d "searchFor=yy" -v 3
 ```
+**testing at selected parameters**
+```
+$ xspear -u "http://testphp.vulnweb.com/search.php?test=query&cat=123&ppl=1fhhahwul" -p cat,test
+```
 etc...
 ### Sample log
 **Scanning XSS**
 ```
 $ xspear -u "http://testphp.vulnweb.com/listproducts.php?cat=1"
+    )  (
+ ( /(  )\ )
+ )\())(()/(          (     )  (
+((_)\  /(_))`  )    ))\ ( /(  )(
+__((_)(_))  /(/(   /((_))(_))(()\
+\ \/ // __|((_)_\ (_)) ((_)_  ((_)
+ >  < \__ \| '_ \)/ -_)/ _` || '_|
+/_/\_\|___/| .__/ \___|\__,_||_|    />
+           |_|                   \ /<
+{\\\\\\\\\\\\\BYHAHWUL\\\\\\\\\\\(0):::<======================-
+                                 / \<
+                                    \>
 [*] creating a test query.
-[*] test query generation is complete. [50 query]
+[*] test query generation is complete. [30 query]
 [*] starting test and analysis. [10 threads]
-[I] [00:57:24] reflected XsPeaR>[param: searchFor][not filtered >]
-[-] [00:57:24] not reflected XsPeaR>
-[-] [00:57:24] not reflected <XsPeaR
-[-] [00:57:24] not reflected XsPeaR"
-[-] [00:57:24] not reflected rEfe6
-...snip...
-[-] [00:57:27] not reflected <script>alert(45)</script>
-[H] [00:57:27] reflected <svg/onload=alert(45)>[param: searchFor][reflected XSS Code]
-[-] [00:57:27] not reflected <svg/onload=alert(45)>
+[-] [01:24:38] not reflected XsPeaR`
+[-] [01:24:38] not reflected XsPeaR>
+[I] [01:24:38] reflected rEfe6[param: cat][reflected parameter]
+[-] [01:24:38] not reflected XsPeaR|
+[-] [01:24:38] not reflected XsPeaR'
+[I] [01:24:38] [param: cat][Found SQL Error Pattern]
+[-] [01:24:38] not reflected XsPeaR(
+[-] [01:24:38] not reflected <XsPeaR
+[-] [01:24:38] not reflected XsPeaR"
+[-] [01:24:38] not reflected XsPeaR;
+[-] [01:24:39] not reflected XsPeaR:
+[-] [01:24:39] not reflected XsPeaR[
+[-] [01:24:39] not reflected XsPeaR]
+[-] [01:24:39] not reflected XsPeaR}
+[-] [01:24:39] not reflected XsPeaR)
+[-] [01:24:39] not reflected XsPeaR{
+[-] [01:24:39] not reflected XsPeaR.
+[-] [01:24:39] not reflected XsPeaR-
+[-] [01:24:39] not reflected XsPeaR+
+[-] [01:24:39] not reflected XsPeaR,
+[I] [01:24:40] reflected XsPeaR$[param: cat][not filtered $]
+[-] [01:24:40] not reflected <svg/onload=alert(45)>
+[H] [01:24:40] reflected <script>alert(45)</script>[param: cat][reflected XSS Code]
+[-] [01:24:40] not reflected XsPeaR=
+[-] [01:24:40] not reflected <img/src onerror=alert(45)>
 [*] finish scan. the report is being generated..
-+----+------+-------------+------------------------------------------------------------+---------------------+
-|                                             [ XSpear report ]                                              |
-|                 2019-07-17 00:57:23 +0900 ~ 2019-07-17 00:58:08 +0900 || Found 24 issues.                  |
-|                              http://testphp.vulnweb.com/search.php?test=query                              |
-+----+------+-------------+------------------------------------------------------------+---------------------+
-| NO | TYPE | ISSUE       | PAYLOAD                                                    | DESCRIPTION         |
-+----+------+-------------+------------------------------------------------------------+---------------------+
-| 0  | INFO | FILERD RULE | searchFor=yyXsPeaR%3E                                      | not filtered >      |
-| 1  | INFO | FILERD RULE | searchFor=yy%3CXsPeaR                                      | not filtered <      |
-| 2  | INFO | FILERD RULE | searchFor=yyXsPeaR%22                                      | not filtered "      |
-| 3  | INFO | FILERD RULE | searchFor=yyXsPeaR%27                                      | not filtered '      |
-| 4  | INFO | REFLECTED   | searchFor=yyrEfe6                                          | reflected parameter |
-| 5  | INFO | FILERD RULE | searchFor=yyXsPeaR%28                                      | not filtered (      |
-| 6  | INFO | FILERD RULE | searchFor=yyXsPeaR%7C                                      | not filtered |      |
-| 7  | INFO | FILERD RULE | searchFor=yyXsPeaR%3B                                      | not filtered ;      |
-| 8  | INFO | FILERD RULE | searchFor=yyXsPeaR%29                                      | not filtered )      |
-| 9  | INFO | FILERD RULE | searchFor=yyXsPeaR%60                                      | not filtered `      |
-| 10 | INFO | FILERD RULE | searchFor=yyXsPeaR%5B                                      | not filtered [      |
-| 11 | INFO | FILERD RULE | searchFor=yyXsPeaR%7B                                      | not filtered {      |
-| 12 | INFO | FILERD RULE | searchFor=yyXsPeaR%5D                                      | not filtered ]      |
-| 13 | INFO | FILERD RULE | searchFor=yyXsPeaR%7D                                      | not filtered }      |
-| 14 | INFO | FILERD RULE | searchFor=yyXsPeaR%3A                                      | not filtered :      |
-| 15 | INFO | FILERD RULE | searchFor=yyXsPeaR.                                        | not filtered .      |
-| 16 | INFO | FILERD RULE | searchFor=yyXsPeaR%2B                                      | not filtered +      |
-| 17 | INFO | FILERD RULE | searchFor=yyXsPeaR%2C                                      | not filtered ,      |
-| 18 | INFO | FILERD RULE | searchFor=yyXsPeaR%3D                                      | not filtered =      |
-| 19 | INFO | FILERD RULE | searchFor=yyXsPeaR-                                        | not filtered -      |
-| 20 | HIGH | XSS         | searchFor=yy%3Cimg%2Fsrc+onerror%3Dalert%2845%29%3E        | reflected XSS Code  |
-| 21 | INFO | FILERD RULE | searchFor=yyXsPeaR%24                                      | not filtered $      |
-| 22 | HIGH | XSS         | searchFor=yy%22%3E%3Cscript%3Ealert%2845%29%3C%2Fscript%3E | reflected XSS Code  |
-| 23 | HIGH | XSS         | searchFor=yy%3Csvg%2Fonload%3Dalert%2845%29%3E             | reflected XSS Code  |
-+----+------+-------------+------------------------------------------------------------+---------------------+
++----+------+------------------+-------+----------------------------+-------------------------+
+|                                      [ XSpear report ]                                      |
+|                      http://testphp.vulnweb.com/listproducts.php?cat=1                      |
+|            2019-07-20 01:24:38 +0900 ~ 2019-07-20 01:25:41 +0900 Found 4 issues.            |
++----+------+------------------+-------+----------------------------+-------------------------+
+| NO | TYPE | ISSUE            | PARAM | PAYLOAD                    | DESCRIPTION             |
++----+------+------------------+-------+----------------------------+-------------------------+
+| 0  | INFO | REFLECTED        | cat   | rEfe6                      | reflected parameter     |
+| 1  | INFO | DYNAMIC ANALYSIS | cat   | XsPeaR"                    | Found SQL Error Pattern |
+| 2  | INFO | FILERD RULE      | cat   | XsPeaR$                    | not filtered $          |
+| 3  | HIGH | XSS              | cat   | <script>alert(45)</script> | reflected XSS Code      |
++----+------+------------------+-------+----------------------------+-------------------------+
+< Raw Query >
+[0] http://testphp.vulnweb.com/listproducts.php?cat=1?cat=1rEfe6
+[1] http://testphp.vulnweb.com/listproducts.php?cat=1?cat=1XsPeaR%22
+[2] http://testphp.vulnweb.com/listproducts.php?cat=1?cat=1XsPeaR%24
+[3] http://testphp.vulnweb.com/listproducts.php?cat=1?cat=1%22%3E%3Cscript%3Ealert%2845%29%3C%2Fscript%3E
 ```
 **to JSON**
@@ -214,5 +231,5 @@ The gem is available as open source under the terms of the [MIT License](https:/
 Everyone interacting in the XSpear project’s codebases, issue trackers, chat rooms and mailing lists is expected to follow the [code of conduct](https://github.com/[USERNAME]/XSpear/blob/master/CODE_OF_CONDUCT.md).
 ## ScreenShot
-<img src="https://user-images.githubusercontent.com/13212227/61311070-8aacfc80-a830-11e9-9091-61d68e16d81a.png" width=100%>
+<img src="https://user-images.githubusercontent.com/13212227/61550885-a7467000-aa8e-11e9-9677-2a0c5800e1cc.png" width=100%>
 <img src="https://user-images.githubusercontent.com/13212227/61311071-8b459300-a830-11e9-8e60-c08e984fdacb.png" width=100%>

data/XSpear.gemspec CHANGED Viewed

@@ -34,11 +34,13 @@ Gem::Specification.new do |spec|
   spec.executables   = spec.files.grep(%r{^exe/}) { |f| File.basename(f) }
   spec.require_paths = ["lib"]
-  spec.add_runtime_dependency "colorize", "0.8.1"
-  spec.add_runtime_dependency "selenium-webdriver", "3.142.3"
+  spec.add_runtime_dependency "colorize", "~> 0.8.1"
+  spec.add_runtime_dependency "selenium-webdriver", "~> 3.142.3"
+  spec.add_runtime_dependency "terminal-table", "~> 1.8.0"
-  spec.add_development_dependency "colorize", "0.8.1"
-  spec.add_development_dependency "selenium-webdriver", "3.142.3"
+  spec.add_development_dependency "colorize", "~> 0.8.1"
+  spec.add_development_dependency "selenium-webdriver", "~> 3.142.3"
+  spec.add_development_dependency "terminal-table" , "~> 1.8.0"
   spec.add_development_dependency "bundler", "~> 2.0"
   spec.add_development_dependency "rake", "~> 10.0"
   spec.add_development_dependency "rspec", "~> 3.0"

data/lib/XSpear/version.rb CHANGED Viewed

@@ -1,3 +1,3 @@
 module XSpear
-  VERSION = "1.0.0"
+  VERSION = "1.0.1"
 end

metadata CHANGED Viewed

@@ -1,71 +1,99 @@
 --- !ruby/object:Gem::Specification
 name: XSpear
 version: !ruby/object:Gem::Version
-  version: 1.0.0
+  version: 1.0.1
 platform: ruby
 authors:
 - hahwul
 autorequire:
 bindir: exe
 cert_chain: []
-date:
+date: 2019-07-20 00:00:00.000000000 Z
 dependencies:
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.8.1
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.8.1
 - !ruby/object:Gem::Dependency
   name: selenium-webdriver
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.142.3
   type: :runtime
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.142.3
+- !ruby/object:Gem::Dependency
+  name: terminal-table
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+  type: :runtime
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: colorize
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.8.1
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 0.8.1
 - !ruby/object:Gem::Dependency
   name: selenium-webdriver
   requirement: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.142.3
   type: :development
   prerelease: false
   version_requirements: !ruby/object:Gem::Requirement
     requirements:
-    - - '='
+    - - "~>"
       - !ruby/object:Gem::Version
         version: 3.142.3
+- !ruby/object:Gem::Dependency
+  name: terminal-table
+  requirement: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
+  type: :development
+  prerelease: false
+  version_requirements: !ruby/object:Gem::Requirement
+    requirements:
+    - - "~>"
+      - !ruby/object:Gem::Version
+        version: 1.8.0
 - !ruby/object:Gem::Dependency
   name: bundler
   requirement: !ruby/object:Gem::Requirement
@@ -129,7 +157,6 @@ files:
 - LICENSE.txt
 - README.md
 - Rakefile
-- XSpear-1.0.0.gem
 - XSpear.gemspec
 - bin/console
 - bin/setup

data/XSpear-1.0.0.gem DELETED Viewed

Binary file