XSpear 1.3.1 → 1.3.2
Sign up to get free protection for your applications and to get access to all the features.
- checksums.yaml +4 -4
- data/.idea/workspace.xml +102 -77
- data/README.md +3 -0
- data/XSpear-1.3.1.gem +0 -0
- data/forBurp/README.md +25 -0
- data/forBurp/otwa.sh +26 -0
- data/lib/XSpear.rb +7 -6
- data/lib/XSpear/version.rb +1 -1
- metadata +5 -2
checksums.yaml
CHANGED
@@ -1,7 +1,7 @@
|
|
1
1
|
---
|
2
2
|
SHA256:
|
3
|
-
metadata.gz:
|
4
|
-
data.tar.gz:
|
3
|
+
metadata.gz: a5509ad9faf3e3689008c91b536685ecf6d381cacf3382ab93387273b3da5537
|
4
|
+
data.tar.gz: '09badc210487ad6720523817cd512c3757dcb898d33526e9fa8559807e376f21'
|
5
5
|
SHA512:
|
6
|
-
metadata.gz:
|
7
|
-
data.tar.gz:
|
6
|
+
metadata.gz: 1b517090b2b2295599a4889e3fba362c84ef9bb048bf3f947e1b0c4661aa3f7d142c37b3156bcd74e57ecdcc76671a3c879f5f0a11bd5aef4cdc90f5ce1bb475
|
7
|
+
data.tar.gz: a39bcd1f637368502cc84deb85d5934f7979de5ed1cada889c9ee6b2ead14dcfc001f0475c6a4178d6e84f23d8052684d9cf668fbeb5fd4a82887efcec032cf5
|
data/.idea/workspace.xml
CHANGED
@@ -3,7 +3,7 @@
|
|
3
3
|
<component name="ChangeListManager">
|
4
4
|
<list default="true" id="4ee2e581-45d7-4c90-b6a1-e92e4b5829dd" name="Default Changelist" comment="">
|
5
5
|
<change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
|
6
|
-
<change beforePath="$PROJECT_DIR$/XSpear.
|
6
|
+
<change beforePath="$PROJECT_DIR$/lib/XSpear.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear.rb" afterDir="false" />
|
7
7
|
<change beforePath="$PROJECT_DIR$/lib/XSpear/version.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear/version.rb" afterDir="false" />
|
8
8
|
</list>
|
9
9
|
<option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
|
@@ -20,7 +20,7 @@
|
|
20
20
|
<file pinned="false" current-in-tab="false">
|
21
21
|
<entry file="file://$PROJECT_DIR$/exe/XSpear">
|
22
22
|
<provider selected="true" editor-type-id="text-editor">
|
23
|
-
<state relative-caret-position="
|
23
|
+
<state relative-caret-position="900">
|
24
24
|
<caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
|
25
25
|
</state>
|
26
26
|
</provider>
|
@@ -30,37 +30,28 @@
|
|
30
30
|
<entry file="file://$PROJECT_DIR$/README.md">
|
31
31
|
<provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
|
32
32
|
<state split_layout="SPLIT">
|
33
|
-
<first_editor relative-caret-position="
|
34
|
-
<caret line="
|
33
|
+
<first_editor relative-caret-position="6525">
|
34
|
+
<caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
|
35
35
|
</first_editor>
|
36
36
|
<second_editor />
|
37
37
|
</state>
|
38
38
|
</provider>
|
39
39
|
</entry>
|
40
40
|
</file>
|
41
|
-
<file pinned="false" current-in-tab="false">
|
42
|
-
<entry file="file://$PROJECT_DIR$/config.json">
|
43
|
-
<provider selected="true" editor-type-id="text-editor">
|
44
|
-
<state relative-caret-position="105">
|
45
|
-
<caret line="7" column="13" selection-end-line="8" selection-end-column="1" />
|
46
|
-
</state>
|
47
|
-
</provider>
|
48
|
-
</entry>
|
49
|
-
</file>
|
50
41
|
<file pinned="false" current-in-tab="false">
|
51
42
|
<entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
|
52
43
|
<provider selected="true" editor-type-id="text-editor">
|
53
|
-
<state relative-caret-position="
|
44
|
+
<state relative-caret-position="1095">
|
54
45
|
<caret line="73" selection-start-line="73" selection-end-line="73" />
|
55
46
|
</state>
|
56
47
|
</provider>
|
57
48
|
</entry>
|
58
49
|
</file>
|
59
|
-
<file pinned="false" current-in-tab="
|
50
|
+
<file pinned="false" current-in-tab="true">
|
60
51
|
<entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
|
61
52
|
<provider selected="true" editor-type-id="text-editor">
|
62
|
-
<state relative-caret-position="
|
63
|
-
<caret line="
|
53
|
+
<state relative-caret-position="230">
|
54
|
+
<caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
|
64
55
|
</state>
|
65
56
|
</provider>
|
66
57
|
</entry>
|
@@ -80,19 +71,31 @@
|
|
80
71
|
</entry>
|
81
72
|
</file>
|
82
73
|
<file pinned="false" current-in-tab="false">
|
83
|
-
<entry file="file://$
|
74
|
+
<entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
|
84
75
|
<provider selected="true" editor-type-id="text-editor">
|
85
|
-
<state relative-caret-position="
|
86
|
-
<caret line="
|
76
|
+
<state relative-caret-position="15">
|
77
|
+
<caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
|
87
78
|
</state>
|
88
79
|
</provider>
|
89
80
|
</entry>
|
90
81
|
</file>
|
91
|
-
<file pinned="false" current-in-tab="
|
92
|
-
<entry file="file://$PROJECT_DIR$/
|
82
|
+
<file pinned="false" current-in-tab="false">
|
83
|
+
<entry file="file://$PROJECT_DIR$/forBurp/README.md">
|
84
|
+
<provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
|
85
|
+
<state split_layout="SPLIT">
|
86
|
+
<first_editor relative-caret-position="105">
|
87
|
+
<caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
|
88
|
+
</first_editor>
|
89
|
+
<second_editor />
|
90
|
+
</state>
|
91
|
+
</provider>
|
92
|
+
</entry>
|
93
|
+
</file>
|
94
|
+
<file pinned="false" current-in-tab="false">
|
95
|
+
<entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
|
93
96
|
<provider selected="true" editor-type-id="text-editor">
|
94
|
-
<state relative-caret-position="
|
95
|
-
<caret line="
|
97
|
+
<state relative-caret-position="375">
|
98
|
+
<caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
|
96
99
|
</state>
|
97
100
|
</provider>
|
98
101
|
</entry>
|
@@ -100,7 +103,7 @@
|
|
100
103
|
<file pinned="false" current-in-tab="false">
|
101
104
|
<entry file="file://$PROJECT_DIR$/XSpear.gemspec">
|
102
105
|
<provider selected="true" editor-type-id="text-editor">
|
103
|
-
<state relative-caret-position="
|
106
|
+
<state relative-caret-position="660">
|
104
107
|
<caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
|
105
108
|
</state>
|
106
109
|
</provider>
|
@@ -123,6 +126,7 @@
|
|
123
126
|
<find>not fil</find>
|
124
127
|
<find>EH</find>
|
125
128
|
<find>CSP</find>
|
129
|
+
<find>URI::encode</find>
|
126
130
|
</findStrings>
|
127
131
|
</component>
|
128
132
|
<component name="Git.Settings">
|
@@ -137,16 +141,18 @@
|
|
137
141
|
<option value="$PROJECT_DIR$/lib/XSpear/log.rb" />
|
138
142
|
<option value="$PROJECT_DIR$/exe/XSpear" />
|
139
143
|
<option value="$PROJECT_DIR$/README.md" />
|
140
|
-
<option value="$PROJECT_DIR$/lib/XSpear.rb" />
|
141
144
|
<option value="$PROJECT_DIR$/XSpear.gemspec" />
|
145
|
+
<option value="$PROJECT_DIR$/forBurp/otwa.sh" />
|
146
|
+
<option value="$PROJECT_DIR$/forBurp/README.md" />
|
147
|
+
<option value="$PROJECT_DIR$/lib/XSpear.rb" />
|
142
148
|
<option value="$PROJECT_DIR$/lib/XSpear/version.rb" />
|
143
149
|
</list>
|
144
150
|
</option>
|
145
151
|
</component>
|
146
|
-
<component name="ProjectFrameBounds"
|
147
|
-
<option name="x" value="-
|
152
|
+
<component name="ProjectFrameBounds">
|
153
|
+
<option name="x" value="-1920" />
|
148
154
|
<option name="y" value="-620" />
|
149
|
-
<option name="width" value="
|
155
|
+
<option name="width" value="1920" />
|
150
156
|
<option name="height" value="1057" />
|
151
157
|
</component>
|
152
158
|
<component name="ProjectLevelVcsManager" settingsEditedManually="true">
|
@@ -157,6 +163,7 @@
|
|
157
163
|
<foldersAlwaysOnTop value="true" />
|
158
164
|
</navigator>
|
159
165
|
<panes>
|
166
|
+
<pane id="Scope" />
|
160
167
|
<pane id="ProjectPane">
|
161
168
|
<subPane>
|
162
169
|
<expand>
|
@@ -194,7 +201,6 @@
|
|
194
201
|
<select />
|
195
202
|
</subPane>
|
196
203
|
</pane>
|
197
|
-
<pane id="Scope" />
|
198
204
|
</panes>
|
199
205
|
</component>
|
200
206
|
<component name="PropertiesComponent">
|
@@ -258,28 +264,9 @@
|
|
258
264
|
<workItem from="1564151699165" duration="2494000" />
|
259
265
|
<workItem from="1564413097342" duration="11274000" />
|
260
266
|
<workItem from="1574090247432" duration="1799000" />
|
261
|
-
<workItem from="1577115206395" duration="
|
262
|
-
|
263
|
-
|
264
|
-
<created>1563646762017</created>
|
265
|
-
<option name="number" value="00023" />
|
266
|
-
<option name="presentableId" value="LOCAL-00023" />
|
267
|
-
<option name="project" value="LOCAL" />
|
268
|
-
<updated>1563646762017</updated>
|
269
|
-
</task>
|
270
|
-
<task id="LOCAL-00024" summary="Edit version , release 1.0.2">
|
271
|
-
<created>1563646850278</created>
|
272
|
-
<option name="number" value="00024" />
|
273
|
-
<option name="presentableId" value="LOCAL-00024" />
|
274
|
-
<option name="project" value="LOCAL" />
|
275
|
-
<updated>1563646850278</updated>
|
276
|
-
</task>
|
277
|
-
<task id="LOCAL-00025" summary="Add EventHandler Test logic (1.0.3), edit description on report">
|
278
|
-
<created>1563648949262</created>
|
279
|
-
<option name="number" value="00025" />
|
280
|
-
<option name="presentableId" value="LOCAL-00025" />
|
281
|
-
<option name="project" value="LOCAL" />
|
282
|
-
<updated>1563648949262</updated>
|
267
|
+
<workItem from="1577115206395" duration="21990000" />
|
268
|
+
<workItem from="1580314696983" duration="286000" />
|
269
|
+
<workItem from="1580583824837" duration="966000" />
|
283
270
|
</task>
|
284
271
|
<task id="LOCAL-00026" summary="verbose가 1일 떄 배너 출력되지 않도록 수정">
|
285
272
|
<created>1563649920055</created>
|
@@ -603,11 +590,32 @@
|
|
603
590
|
<option name="project" value="LOCAL" />
|
604
591
|
<updated>1577628652705</updated>
|
605
592
|
</task>
|
606
|
-
<
|
593
|
+
<task id="LOCAL-00072" summary="(1.3) Fixed dependency bug">
|
594
|
+
<created>1577629109580</created>
|
595
|
+
<option name="number" value="00072" />
|
596
|
+
<option name="presentableId" value="LOCAL-00072" />
|
597
|
+
<option name="project" value="LOCAL" />
|
598
|
+
<updated>1577629109580</updated>
|
599
|
+
</task>
|
600
|
+
<task id="LOCAL-00073" summary="(1.3) Fixed dependency bug">
|
601
|
+
<created>1577629178860</created>
|
602
|
+
<option name="number" value="00073" />
|
603
|
+
<option name="presentableId" value="LOCAL-00073" />
|
604
|
+
<option name="project" value="LOCAL" />
|
605
|
+
<updated>1577629178860</updated>
|
606
|
+
</task>
|
607
|
+
<task id="LOCAL-00074" summary="XSpear on Burpsuite">
|
608
|
+
<created>1577632578176</created>
|
609
|
+
<option name="number" value="00074" />
|
610
|
+
<option name="presentableId" value="LOCAL-00074" />
|
611
|
+
<option name="project" value="LOCAL" />
|
612
|
+
<updated>1577632578176</updated>
|
613
|
+
</task>
|
614
|
+
<option name="localTasksCounter" value="75" />
|
607
615
|
<servers />
|
608
616
|
</component>
|
609
617
|
<component name="TimeTrackingManager">
|
610
|
-
<option name="totallyTimeSpent" value="
|
618
|
+
<option name="totallyTimeSpent" value="75285000" />
|
611
619
|
</component>
|
612
620
|
<component name="TodoView">
|
613
621
|
<todo-panel id="selected-file">
|
@@ -619,10 +627,10 @@
|
|
619
627
|
</todo-panel>
|
620
628
|
</component>
|
621
629
|
<component name="ToolWindowManager">
|
622
|
-
<frame x="-
|
630
|
+
<frame x="-1920" y="-620" width="1920" height="1057" extended-state="0" />
|
623
631
|
<editor active="true" />
|
624
632
|
<layout>
|
625
|
-
<window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.
|
633
|
+
<window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.13578275" />
|
626
634
|
<window_info id="Structure" order="1" side_tool="true" weight="0.25" />
|
627
635
|
<window_info id="Favorites" order="2" side_tool="true" />
|
628
636
|
<window_info anchor="bottom" id="Message" order="0" />
|
@@ -648,8 +656,6 @@
|
|
648
656
|
<option name="version" value="1" />
|
649
657
|
</component>
|
650
658
|
<component name="VcsManagerConfiguration">
|
651
|
-
<MESSAGE value="(1.0.9)[Fixed #13] Remove add pattern from StandardError in 'makeQueryPattern'" />
|
652
|
-
<MESSAGE value="(1.0.9) Releases 1.0.9 / Add --raw options, code refactoring, fixed bugs" />
|
653
659
|
<MESSAGE value="(1.1.0) [Fixed #14] Edit raw query print code" />
|
654
660
|
<MESSAGE value="(1.1.0) [Fixed #15] makeQueryPattern 내 페이로드 생성 코드 수정" />
|
655
661
|
<MESSAGE value="(1.1.0) Releases 1.1.0 / Fixed bug, modify report format, etc.." />
|
@@ -673,7 +679,9 @@
|
|
673
679
|
<MESSAGE value="(1.3) fixed #37 (Added -c --config options)" />
|
674
680
|
<MESSAGE value="(1.3) fixed #40 (Reformating Logs / Verbose 0~4)" />
|
675
681
|
<MESSAGE value="(1.3) Released 1.3.0 +_+" />
|
676
|
-
<
|
682
|
+
<MESSAGE value="(1.3) Fixed dependency bug" />
|
683
|
+
<MESSAGE value="XSpear on Burpsuite" />
|
684
|
+
<option name="LAST_COMMIT_MESSAGE" value="XSpear on Burpsuite" />
|
677
685
|
</component>
|
678
686
|
<component name="editorHistoryManager">
|
679
687
|
<entry file="file://$USER_HOME$/.rvm/gems/ruby-2.4.6/gems/bundler-2.0.1/lib/bundler/rubygems_integration.rb">
|
@@ -733,19 +741,9 @@
|
|
733
741
|
</state>
|
734
742
|
</provider>
|
735
743
|
</entry>
|
736
|
-
<entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
|
737
|
-
<provider selected="true" editor-type-id="text-editor">
|
738
|
-
<state relative-caret-position="195">
|
739
|
-
<caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
|
740
|
-
</state>
|
741
|
-
</provider>
|
742
|
-
</entry>
|
743
|
-
<entry file="file://$PROJECT_DIR$/bin/console">
|
744
|
-
<provider selected="true" editor-type-id="text-editor" />
|
745
|
-
</entry>
|
746
744
|
<entry file="file://$PROJECT_DIR$/exe/XSpear">
|
747
745
|
<provider selected="true" editor-type-id="text-editor">
|
748
|
-
<state relative-caret-position="
|
746
|
+
<state relative-caret-position="900">
|
749
747
|
<caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
|
750
748
|
</state>
|
751
749
|
</provider>
|
@@ -753,8 +751,8 @@
|
|
753
751
|
<entry file="file://$PROJECT_DIR$/README.md">
|
754
752
|
<provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
|
755
753
|
<state split_layout="SPLIT">
|
756
|
-
<first_editor relative-caret-position="
|
757
|
-
<caret line="
|
754
|
+
<first_editor relative-caret-position="6525">
|
755
|
+
<caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
|
758
756
|
</first_editor>
|
759
757
|
<second_editor />
|
760
758
|
</state>
|
@@ -762,21 +760,41 @@
|
|
762
760
|
</entry>
|
763
761
|
<entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
|
764
762
|
<provider selected="true" editor-type-id="text-editor">
|
765
|
-
<state relative-caret-position="
|
763
|
+
<state relative-caret-position="1095">
|
766
764
|
<caret line="73" selection-start-line="73" selection-end-line="73" />
|
767
765
|
</state>
|
768
766
|
</provider>
|
769
767
|
</entry>
|
770
|
-
<entry file="file://$PROJECT_DIR$/
|
768
|
+
<entry file="file://$PROJECT_DIR$/bin/console">
|
769
|
+
<provider selected="true" editor-type-id="text-editor" />
|
770
|
+
</entry>
|
771
|
+
<entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
|
771
772
|
<provider selected="true" editor-type-id="text-editor">
|
772
|
-
<state relative-caret-position="
|
773
|
-
<caret line="
|
773
|
+
<state relative-caret-position="195">
|
774
|
+
<caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
|
775
|
+
</state>
|
776
|
+
</provider>
|
777
|
+
</entry>
|
778
|
+
<entry file="file://$PROJECT_DIR$/forBurp/README.md">
|
779
|
+
<provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
|
780
|
+
<state split_layout="SPLIT">
|
781
|
+
<first_editor relative-caret-position="105">
|
782
|
+
<caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
|
783
|
+
</first_editor>
|
784
|
+
<second_editor />
|
785
|
+
</state>
|
786
|
+
</provider>
|
787
|
+
</entry>
|
788
|
+
<entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
|
789
|
+
<provider selected="true" editor-type-id="text-editor">
|
790
|
+
<state relative-caret-position="375">
|
791
|
+
<caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
|
774
792
|
</state>
|
775
793
|
</provider>
|
776
794
|
</entry>
|
777
795
|
<entry file="file://$PROJECT_DIR$/XSpear.gemspec">
|
778
796
|
<provider selected="true" editor-type-id="text-editor">
|
779
|
-
<state relative-caret-position="
|
797
|
+
<state relative-caret-position="660">
|
780
798
|
<caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
|
781
799
|
</state>
|
782
800
|
</provider>
|
@@ -788,5 +806,12 @@
|
|
788
806
|
</state>
|
789
807
|
</provider>
|
790
808
|
</entry>
|
809
|
+
<entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
|
810
|
+
<provider selected="true" editor-type-id="text-editor">
|
811
|
+
<state relative-caret-position="230">
|
812
|
+
<caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
|
813
|
+
</state>
|
814
|
+
</provider>
|
815
|
+
</entry>
|
791
816
|
</component>
|
792
817
|
</project>
|
data/README.md
CHANGED
data/XSpear-1.3.1.gem
ADDED
Binary file
|
data/forBurp/README.md
ADDED
@@ -0,0 +1,25 @@
|
|
1
|
+
# XSpear on Burpsuite
|
2
|
+
<img src="https://1.bp.blogspot.com/-P_MFaYn37Ps/XgjBrDN41lI/AAAAAAAAEzQ/WQbrkvwfEBYuqYLrotA2CUflMwQ3hEKpACLcBGAsYHQ/s640/1413.png" width=100%>
|
3
|
+
|
4
|
+
## Blog post
|
5
|
+
https://www.hahwul.com/2019/12/run-other-application-on-burp-suiteburp.html
|
6
|
+
|
7
|
+
## Custom Send to
|
8
|
+
go to BApp store
|
9
|
+
|
10
|
+
## Entries
|
11
|
+
```
|
12
|
+
Name: XSpear
|
13
|
+
Command: xspear --raw %F -a -b {your-blind-xss-url}
|
14
|
+
```
|
15
|
+
|
16
|
+
## Miscellaneous
|
17
|
+
```
|
18
|
+
# MacOS
|
19
|
+
~~your-path~~/open_terminal_with_args/otwa.sh %C
|
20
|
+
|
21
|
+
# Linux
|
22
|
+
(default) xterm %C
|
23
|
+
```
|
24
|
+
|
25
|
+
<img src="https://1.bp.blogspot.com/-WDmUI8QzX-4/XgjAx3TX3sI/AAAAAAAAEyw/YKKC23hLVYQtkBvPl_T7UybSL5RYKi-UwCLcBGAsYHQ/s640/1415.png" width=100%>
|
data/forBurp/otwa.sh
ADDED
@@ -0,0 +1,26 @@
|
|
1
|
+
echo '
|
2
|
+
on run argv
|
3
|
+
if length of argv is equal to 0
|
4
|
+
set command to ""
|
5
|
+
else
|
6
|
+
set command to item 1 of argv
|
7
|
+
end if
|
8
|
+
if length of argv is greater than 1
|
9
|
+
set profile to item 2 of argv
|
10
|
+
runWithProfile(command, profile)
|
11
|
+
else
|
12
|
+
runSimple(command)
|
13
|
+
end if
|
14
|
+
end run
|
15
|
+
on runSimple(command)
|
16
|
+
tell application "Terminal"
|
17
|
+
activate
|
18
|
+
set newTab to do script(command)
|
19
|
+
end tell
|
20
|
+
return newTab
|
21
|
+
end runSimple
|
22
|
+
on runWithProfile(command, profile)
|
23
|
+
set newTab to runSimple(command)
|
24
|
+
tell application "Terminal" to set current settings of newTab to (first settings set whose name is profile)
|
25
|
+
end runWithProfile
|
26
|
+
' | osascript - "$@" > /dev/null
|
data/lib/XSpear.rb
CHANGED
@@ -643,7 +643,7 @@ class XspearScan
|
|
643
643
|
attack = ""
|
644
644
|
dparams = params
|
645
645
|
dparams.each do |d|
|
646
|
-
attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI
|
646
|
+
attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
|
647
647
|
#d[1] = p[1] + payload if p[0] == d[0]
|
648
648
|
end
|
649
649
|
result.push("inject": 'url',"param":p[0] ,"type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
|
@@ -658,7 +658,8 @@ class XspearScan
|
|
658
658
|
attack = ""
|
659
659
|
dparams = params
|
660
660
|
dparams.each do |d|
|
661
|
-
attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI
|
661
|
+
attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
|
662
|
+
# #45 Issue, URI::encode to URI.encode_www_form_component
|
662
663
|
#d[1] = p[1] + payload if p[0] == d[0]
|
663
664
|
end
|
664
665
|
result.push("inject": 'body', "param":p[0], "type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
|
@@ -669,10 +670,10 @@ class XspearScan
|
|
669
670
|
if callback == CallbackXSSSelenium
|
670
671
|
begin
|
671
672
|
puri = URI.parse(@url)
|
672
|
-
puri.path = puri.path+URI.
|
673
|
+
puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
|
673
674
|
result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
|
674
675
|
puri = URI.parse(@url)
|
675
|
-
puri.path = puri.path+URI.
|
676
|
+
puri.path = puri.path+URI.encode_www_form_component(pattern)
|
676
677
|
result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
|
677
678
|
rescue
|
678
679
|
# bypass
|
@@ -686,10 +687,10 @@ class XspearScan
|
|
686
687
|
if callback == CallbackXSSSelenium
|
687
688
|
begin
|
688
689
|
puri = URI.parse(@url)
|
689
|
-
puri.path = puri.path+URI.
|
690
|
+
puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
|
690
691
|
result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
|
691
692
|
puri = URI.parse(@url)
|
692
|
-
puri.path = puri.path+URI.
|
693
|
+
puri.path = puri.path+URI.encode_www_form_component(pattern)
|
693
694
|
result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
|
694
695
|
rescue
|
695
696
|
# bypass
|
data/lib/XSpear/version.rb
CHANGED
metadata
CHANGED
@@ -1,14 +1,14 @@
|
|
1
1
|
--- !ruby/object:Gem::Specification
|
2
2
|
name: XSpear
|
3
3
|
version: !ruby/object:Gem::Version
|
4
|
-
version: 1.3.
|
4
|
+
version: 1.3.2
|
5
5
|
platform: ruby
|
6
6
|
authors:
|
7
7
|
- hahwul
|
8
8
|
autorequire:
|
9
9
|
bindir: exe
|
10
10
|
cert_chain: []
|
11
|
-
date:
|
11
|
+
date: 2020-02-01 00:00:00.000000000 Z
|
12
12
|
dependencies:
|
13
13
|
- !ruby/object:Gem::Dependency
|
14
14
|
name: colorize
|
@@ -186,11 +186,14 @@ files:
|
|
186
186
|
- LICENSE.txt
|
187
187
|
- README.md
|
188
188
|
- Rakefile
|
189
|
+
- XSpear-1.3.1.gem
|
189
190
|
- XSpear.gemspec
|
190
191
|
- bin/console
|
191
192
|
- bin/setup
|
192
193
|
- config.json
|
193
194
|
- exe/XSpear
|
195
|
+
- forBurp/README.md
|
196
|
+
- forBurp/otwa.sh
|
194
197
|
- lib/XSpear.rb
|
195
198
|
- lib/XSpear/XSpearRepoter.rb
|
196
199
|
- lib/XSpear/banner.rb
|