XSpear 1.3.1 → 1.3.2

Sign up to get free protection for your applications and to get access to all the features.
checksums.yaml CHANGED
@@ -1,7 +1,7 @@
1
1
  ---
2
2
  SHA256:
3
- metadata.gz: a4135e5124b742659bf18cac9ebf4af9d7ec8ee799530d6ab9ed4e283c1911a9
4
- data.tar.gz: a5f32df20d58ce0d20d9b1fad4cc9f81191d74a97b331da64f0abfd234c88f07
3
+ metadata.gz: a5509ad9faf3e3689008c91b536685ecf6d381cacf3382ab93387273b3da5537
4
+ data.tar.gz: '09badc210487ad6720523817cd512c3757dcb898d33526e9fa8559807e376f21'
5
5
  SHA512:
6
- metadata.gz: 10cefd5c92976be2e6b7f6d83133321c54cad14801a12fae48505eff599d7559d6ba1ddae1a4ad893548469fd79c51a94cd16db9f27e37774da5b4ee0e79b3b0
7
- data.tar.gz: e7e0baa79f8c09c3acc0b7c57c222e8ccc2d3a00a49508d3603a2efb93e87b5ca3b0424085fc878d1670598d3d75a7e7b12d3fafbe4cdfa5813ccc7272ba4bf7
6
+ metadata.gz: 1b517090b2b2295599a4889e3fba362c84ef9bb048bf3f947e1b0c4661aa3f7d142c37b3156bcd74e57ecdcc76671a3c879f5f0a11bd5aef4cdc90f5ce1bb475
7
+ data.tar.gz: a39bcd1f637368502cc84deb85d5934f7979de5ed1cada889c9ee6b2ead14dcfc001f0475c6a4178d6e84f23d8052684d9cf668fbeb5fd4a82887efcec032cf5
data/.idea/workspace.xml CHANGED
@@ -3,7 +3,7 @@
3
3
  <component name="ChangeListManager">
4
4
  <list default="true" id="4ee2e581-45d7-4c90-b6a1-e92e4b5829dd" name="Default Changelist" comment="">
5
5
  <change beforePath="$PROJECT_DIR$/.idea/workspace.xml" beforeDir="false" afterPath="$PROJECT_DIR$/.idea/workspace.xml" afterDir="false" />
6
- <change beforePath="$PROJECT_DIR$/XSpear.gemspec" beforeDir="false" afterPath="$PROJECT_DIR$/XSpear.gemspec" afterDir="false" />
6
+ <change beforePath="$PROJECT_DIR$/lib/XSpear.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear.rb" afterDir="false" />
7
7
  <change beforePath="$PROJECT_DIR$/lib/XSpear/version.rb" beforeDir="false" afterPath="$PROJECT_DIR$/lib/XSpear/version.rb" afterDir="false" />
8
8
  </list>
9
9
  <option name="EXCLUDED_CONVERTED_TO_IGNORED" value="true" />
@@ -20,7 +20,7 @@
20
20
  <file pinned="false" current-in-tab="false">
21
21
  <entry file="file://$PROJECT_DIR$/exe/XSpear">
22
22
  <provider selected="true" editor-type-id="text-editor">
23
- <state relative-caret-position="489">
23
+ <state relative-caret-position="900">
24
24
  <caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
25
25
  </state>
26
26
  </provider>
@@ -30,37 +30,28 @@
30
30
  <entry file="file://$PROJECT_DIR$/README.md">
31
31
  <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
32
32
  <state split_layout="SPLIT">
33
- <first_editor relative-caret-position="6480">
34
- <caret line="432" column="38" selection-start-line="432" selection-start-column="38" selection-end-line="432" selection-end-column="38" />
33
+ <first_editor relative-caret-position="6525">
34
+ <caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
35
35
  </first_editor>
36
36
  <second_editor />
37
37
  </state>
38
38
  </provider>
39
39
  </entry>
40
40
  </file>
41
- <file pinned="false" current-in-tab="false">
42
- <entry file="file://$PROJECT_DIR$/config.json">
43
- <provider selected="true" editor-type-id="text-editor">
44
- <state relative-caret-position="105">
45
- <caret line="7" column="13" selection-end-line="8" selection-end-column="1" />
46
- </state>
47
- </provider>
48
- </entry>
49
- </file>
50
41
  <file pinned="false" current-in-tab="false">
51
42
  <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
52
43
  <provider selected="true" editor-type-id="text-editor">
53
- <state relative-caret-position="28">
44
+ <state relative-caret-position="1095">
54
45
  <caret line="73" selection-start-line="73" selection-end-line="73" />
55
46
  </state>
56
47
  </provider>
57
48
  </entry>
58
49
  </file>
59
- <file pinned="false" current-in-tab="false">
50
+ <file pinned="false" current-in-tab="true">
60
51
  <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
61
52
  <provider selected="true" editor-type-id="text-editor">
62
- <state relative-caret-position="2511">
63
- <caret line="183" selection-start-line="183" selection-end-line="183" />
53
+ <state relative-caret-position="230">
54
+ <caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
64
55
  </state>
65
56
  </provider>
66
57
  </entry>
@@ -80,19 +71,31 @@
80
71
  </entry>
81
72
  </file>
82
73
  <file pinned="false" current-in-tab="false">
83
- <entry file="file://$APPLICATION_HOME_DIR$/rubystubs23/string.rb">
74
+ <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
84
75
  <provider selected="true" editor-type-id="text-editor">
85
- <state relative-caret-position="237">
86
- <caret line="302" column="6" selection-start-line="302" selection-start-column="6" selection-end-line="302" selection-end-column="6" />
76
+ <state relative-caret-position="15">
77
+ <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
87
78
  </state>
88
79
  </provider>
89
80
  </entry>
90
81
  </file>
91
- <file pinned="false" current-in-tab="true">
92
- <entry file="file://$PROJECT_DIR$/lib/XSpear/version.rb">
82
+ <file pinned="false" current-in-tab="false">
83
+ <entry file="file://$PROJECT_DIR$/forBurp/README.md">
84
+ <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
85
+ <state split_layout="SPLIT">
86
+ <first_editor relative-caret-position="105">
87
+ <caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
88
+ </first_editor>
89
+ <second_editor />
90
+ </state>
91
+ </provider>
92
+ </entry>
93
+ </file>
94
+ <file pinned="false" current-in-tab="false">
95
+ <entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
93
96
  <provider selected="true" editor-type-id="text-editor">
94
- <state relative-caret-position="15">
95
- <caret line="1" column="18" selection-start-line="1" selection-start-column="18" selection-end-line="1" selection-end-column="18" />
97
+ <state relative-caret-position="375">
98
+ <caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
96
99
  </state>
97
100
  </provider>
98
101
  </entry>
@@ -100,7 +103,7 @@
100
103
  <file pinned="false" current-in-tab="false">
101
104
  <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
102
105
  <provider selected="true" editor-type-id="text-editor">
103
- <state relative-caret-position="539">
106
+ <state relative-caret-position="660">
104
107
  <caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
105
108
  </state>
106
109
  </provider>
@@ -123,6 +126,7 @@
123
126
  <find>not fil</find>
124
127
  <find>EH</find>
125
128
  <find>CSP</find>
129
+ <find>URI::encode</find>
126
130
  </findStrings>
127
131
  </component>
128
132
  <component name="Git.Settings">
@@ -137,16 +141,18 @@
137
141
  <option value="$PROJECT_DIR$/lib/XSpear/log.rb" />
138
142
  <option value="$PROJECT_DIR$/exe/XSpear" />
139
143
  <option value="$PROJECT_DIR$/README.md" />
140
- <option value="$PROJECT_DIR$/lib/XSpear.rb" />
141
144
  <option value="$PROJECT_DIR$/XSpear.gemspec" />
145
+ <option value="$PROJECT_DIR$/forBurp/otwa.sh" />
146
+ <option value="$PROJECT_DIR$/forBurp/README.md" />
147
+ <option value="$PROJECT_DIR$/lib/XSpear.rb" />
142
148
  <option value="$PROJECT_DIR$/lib/XSpear/version.rb" />
143
149
  </list>
144
150
  </option>
145
151
  </component>
146
- <component name="ProjectFrameBounds" extendedState="6">
147
- <option name="x" value="-1879" />
152
+ <component name="ProjectFrameBounds">
153
+ <option name="x" value="-1920" />
148
154
  <option name="y" value="-620" />
149
- <option name="width" value="1036" />
155
+ <option name="width" value="1920" />
150
156
  <option name="height" value="1057" />
151
157
  </component>
152
158
  <component name="ProjectLevelVcsManager" settingsEditedManually="true">
@@ -157,6 +163,7 @@
157
163
  <foldersAlwaysOnTop value="true" />
158
164
  </navigator>
159
165
  <panes>
166
+ <pane id="Scope" />
160
167
  <pane id="ProjectPane">
161
168
  <subPane>
162
169
  <expand>
@@ -194,7 +201,6 @@
194
201
  <select />
195
202
  </subPane>
196
203
  </pane>
197
- <pane id="Scope" />
198
204
  </panes>
199
205
  </component>
200
206
  <component name="PropertiesComponent">
@@ -258,28 +264,9 @@
258
264
  <workItem from="1564151699165" duration="2494000" />
259
265
  <workItem from="1564413097342" duration="11274000" />
260
266
  <workItem from="1574090247432" duration="1799000" />
261
- <workItem from="1577115206395" duration="20845000" />
262
- </task>
263
- <task id="LOCAL-00023" summary="Add show version &amp; edit help, version in banner">
264
- <created>1563646762017</created>
265
- <option name="number" value="00023" />
266
- <option name="presentableId" value="LOCAL-00023" />
267
- <option name="project" value="LOCAL" />
268
- <updated>1563646762017</updated>
269
- </task>
270
- <task id="LOCAL-00024" summary="Edit version , release 1.0.2">
271
- <created>1563646850278</created>
272
- <option name="number" value="00024" />
273
- <option name="presentableId" value="LOCAL-00024" />
274
- <option name="project" value="LOCAL" />
275
- <updated>1563646850278</updated>
276
- </task>
277
- <task id="LOCAL-00025" summary="Add EventHandler Test logic (1.0.3), edit description on report">
278
- <created>1563648949262</created>
279
- <option name="number" value="00025" />
280
- <option name="presentableId" value="LOCAL-00025" />
281
- <option name="project" value="LOCAL" />
282
- <updated>1563648949262</updated>
267
+ <workItem from="1577115206395" duration="21990000" />
268
+ <workItem from="1580314696983" duration="286000" />
269
+ <workItem from="1580583824837" duration="966000" />
283
270
  </task>
284
271
  <task id="LOCAL-00026" summary="verbose가 1일 떄 배너 출력되지 않도록 수정">
285
272
  <created>1563649920055</created>
@@ -603,11 +590,32 @@
603
590
  <option name="project" value="LOCAL" />
604
591
  <updated>1577628652705</updated>
605
592
  </task>
606
- <option name="localTasksCounter" value="72" />
593
+ <task id="LOCAL-00072" summary="(1.3) Fixed dependency bug">
594
+ <created>1577629109580</created>
595
+ <option name="number" value="00072" />
596
+ <option name="presentableId" value="LOCAL-00072" />
597
+ <option name="project" value="LOCAL" />
598
+ <updated>1577629109580</updated>
599
+ </task>
600
+ <task id="LOCAL-00073" summary="(1.3) Fixed dependency bug">
601
+ <created>1577629178860</created>
602
+ <option name="number" value="00073" />
603
+ <option name="presentableId" value="LOCAL-00073" />
604
+ <option name="project" value="LOCAL" />
605
+ <updated>1577629178860</updated>
606
+ </task>
607
+ <task id="LOCAL-00074" summary="XSpear on Burpsuite">
608
+ <created>1577632578176</created>
609
+ <option name="number" value="00074" />
610
+ <option name="presentableId" value="LOCAL-00074" />
611
+ <option name="project" value="LOCAL" />
612
+ <updated>1577632578176</updated>
613
+ </task>
614
+ <option name="localTasksCounter" value="75" />
607
615
  <servers />
608
616
  </component>
609
617
  <component name="TimeTrackingManager">
610
- <option name="totallyTimeSpent" value="72888000" />
618
+ <option name="totallyTimeSpent" value="75285000" />
611
619
  </component>
612
620
  <component name="TodoView">
613
621
  <todo-panel id="selected-file">
@@ -619,10 +627,10 @@
619
627
  </todo-panel>
620
628
  </component>
621
629
  <component name="ToolWindowManager">
622
- <frame x="-1879" y="-620" width="1879" height="1057" extended-state="6" />
630
+ <frame x="-1920" y="-620" width="1920" height="1057" extended-state="0" />
623
631
  <editor active="true" />
624
632
  <layout>
625
- <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.13336962" />
633
+ <window_info active="true" content_ui="combo" id="Project" order="0" visible="true" weight="0.13578275" />
626
634
  <window_info id="Structure" order="1" side_tool="true" weight="0.25" />
627
635
  <window_info id="Favorites" order="2" side_tool="true" />
628
636
  <window_info anchor="bottom" id="Message" order="0" />
@@ -648,8 +656,6 @@
648
656
  <option name="version" value="1" />
649
657
  </component>
650
658
  <component name="VcsManagerConfiguration">
651
- <MESSAGE value="(1.0.9)[Fixed #13] Remove add pattern from StandardError in 'makeQueryPattern'" />
652
- <MESSAGE value="(1.0.9) Releases 1.0.9 / Add --raw options, code refactoring, fixed bugs" />
653
659
  <MESSAGE value="(1.1.0) [Fixed #14] Edit raw query print code" />
654
660
  <MESSAGE value="(1.1.0) [Fixed #15] makeQueryPattern 내 페이로드 생성 코드 수정" />
655
661
  <MESSAGE value="(1.1.0) Releases 1.1.0 / Fixed bug, modify report format, etc.." />
@@ -673,7 +679,9 @@
673
679
  <MESSAGE value="(1.3) fixed #37 (Added -c --config options)" />
674
680
  <MESSAGE value="(1.3) fixed #40 (Reformating Logs / Verbose 0~4)" />
675
681
  <MESSAGE value="(1.3) Released 1.3.0 +_+" />
676
- <option name="LAST_COMMIT_MESSAGE" value="(1.3) Released 1.3.0 +_+" />
682
+ <MESSAGE value="(1.3) Fixed dependency bug" />
683
+ <MESSAGE value="XSpear on Burpsuite" />
684
+ <option name="LAST_COMMIT_MESSAGE" value="XSpear on Burpsuite" />
677
685
  </component>
678
686
  <component name="editorHistoryManager">
679
687
  <entry file="file://$USER_HOME$/.rvm/gems/ruby-2.4.6/gems/bundler-2.0.1/lib/bundler/rubygems_integration.rb">
@@ -733,19 +741,9 @@
733
741
  </state>
734
742
  </provider>
735
743
  </entry>
736
- <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
737
- <provider selected="true" editor-type-id="text-editor">
738
- <state relative-caret-position="195">
739
- <caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
740
- </state>
741
- </provider>
742
- </entry>
743
- <entry file="file://$PROJECT_DIR$/bin/console">
744
- <provider selected="true" editor-type-id="text-editor" />
745
- </entry>
746
744
  <entry file="file://$PROJECT_DIR$/exe/XSpear">
747
745
  <provider selected="true" editor-type-id="text-editor">
748
- <state relative-caret-position="489">
746
+ <state relative-caret-position="900">
749
747
  <caret line="60" column="77" selection-start-line="60" selection-start-column="77" selection-end-line="60" selection-end-column="77" />
750
748
  </state>
751
749
  </provider>
@@ -753,8 +751,8 @@
753
751
  <entry file="file://$PROJECT_DIR$/README.md">
754
752
  <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
755
753
  <state split_layout="SPLIT">
756
- <first_editor relative-caret-position="6480">
757
- <caret line="432" column="38" selection-start-line="432" selection-start-column="38" selection-end-line="432" selection-end-column="38" />
754
+ <first_editor relative-caret-position="6525">
755
+ <caret line="435" column="38" selection-start-line="435" selection-start-column="38" selection-end-line="435" selection-end-column="38" />
758
756
  </first_editor>
759
757
  <second_editor />
760
758
  </state>
@@ -762,21 +760,41 @@
762
760
  </entry>
763
761
  <entry file="file://$PROJECT_DIR$/lib/XSpear/XSpearRepoter.rb">
764
762
  <provider selected="true" editor-type-id="text-editor">
765
- <state relative-caret-position="28">
763
+ <state relative-caret-position="1095">
766
764
  <caret line="73" selection-start-line="73" selection-end-line="73" />
767
765
  </state>
768
766
  </provider>
769
767
  </entry>
770
- <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
768
+ <entry file="file://$PROJECT_DIR$/bin/console">
769
+ <provider selected="true" editor-type-id="text-editor" />
770
+ </entry>
771
+ <entry file="file://$PROJECT_DIR$/lib/XSpear/log.rb">
771
772
  <provider selected="true" editor-type-id="text-editor">
772
- <state relative-caret-position="2511">
773
- <caret line="183" selection-start-line="183" selection-end-line="183" />
773
+ <state relative-caret-position="195">
774
+ <caret line="13" column="38" selection-start-line="13" selection-start-column="38" selection-end-line="13" selection-end-column="38" />
775
+ </state>
776
+ </provider>
777
+ </entry>
778
+ <entry file="file://$PROJECT_DIR$/forBurp/README.md">
779
+ <provider selected="true" editor-type-id="split-provider[text-editor;markdown-preview-editor]">
780
+ <state split_layout="SPLIT">
781
+ <first_editor relative-caret-position="105">
782
+ <caret line="7" column="16" selection-start-line="7" selection-start-column="16" selection-end-line="7" selection-end-column="16" />
783
+ </first_editor>
784
+ <second_editor />
785
+ </state>
786
+ </provider>
787
+ </entry>
788
+ <entry file="file://$PROJECT_DIR$/forBurp/otwa.sh">
789
+ <provider selected="true" editor-type-id="text-editor">
790
+ <state relative-caret-position="375">
791
+ <caret line="25" column="32" selection-start-line="25" selection-start-column="32" selection-end-line="25" selection-end-column="32" />
774
792
  </state>
775
793
  </provider>
776
794
  </entry>
777
795
  <entry file="file://$PROJECT_DIR$/XSpear.gemspec">
778
796
  <provider selected="true" editor-type-id="text-editor">
779
- <state relative-caret-position="539">
797
+ <state relative-caret-position="660">
780
798
  <caret line="44" column="59" selection-start-line="44" selection-start-column="59" selection-end-line="44" selection-end-column="59" />
781
799
  </state>
782
800
  </provider>
@@ -788,5 +806,12 @@
788
806
  </state>
789
807
  </provider>
790
808
  </entry>
809
+ <entry file="file://$PROJECT_DIR$/lib/XSpear.rb">
810
+ <provider selected="true" editor-type-id="text-editor">
811
+ <state relative-caret-position="230">
812
+ <caret line="651" column="13" lean-forward="true" selection-start-line="651" selection-start-column="13" selection-end-line="651" selection-end-column="13" />
813
+ </state>
814
+ </provider>
815
+ </entry>
791
816
  </component>
792
817
  </project>
data/README.md CHANGED
@@ -314,6 +314,9 @@ result json data
314
314
  ```
315
315
  (Items marked as `triggered` are actually payloads that work in the browser.)
316
316
 
317
+ **XSpear on Burpsuite**<br>
318
+ https://github.com/hahwul/XSpear/tree/master/forBurp
319
+
317
320
  etc...
318
321
 
319
322
  ### Sample log
data/XSpear-1.3.1.gem ADDED
Binary file
data/forBurp/README.md ADDED
@@ -0,0 +1,25 @@
1
+ # XSpear on Burpsuite
2
+ <img src="https://1.bp.blogspot.com/-P_MFaYn37Ps/XgjBrDN41lI/AAAAAAAAEzQ/WQbrkvwfEBYuqYLrotA2CUflMwQ3hEKpACLcBGAsYHQ/s640/1413.png" width=100%>
3
+
4
+ ## Blog post
5
+ https://www.hahwul.com/2019/12/run-other-application-on-burp-suiteburp.html
6
+
7
+ ## Custom Send to
8
+ go to BApp store
9
+
10
+ ## Entries
11
+ ```
12
+ Name: XSpear
13
+ Command: xspear --raw %F -a -b {your-blind-xss-url}
14
+ ```
15
+
16
+ ## Miscellaneous
17
+ ```
18
+ # MacOS
19
+ ~~your-path~~/open_terminal_with_args/otwa.sh %C
20
+
21
+ # Linux
22
+ (default) xterm %C
23
+ ```
24
+
25
+ <img src="https://1.bp.blogspot.com/-WDmUI8QzX-4/XgjAx3TX3sI/AAAAAAAAEyw/YKKC23hLVYQtkBvPl_T7UybSL5RYKi-UwCLcBGAsYHQ/s640/1415.png" width=100%>
data/forBurp/otwa.sh ADDED
@@ -0,0 +1,26 @@
1
+ echo '
2
+ on run argv
3
+ if length of argv is equal to 0
4
+ set command to ""
5
+ else
6
+ set command to item 1 of argv
7
+ end if
8
+ if length of argv is greater than 1
9
+ set profile to item 2 of argv
10
+ runWithProfile(command, profile)
11
+ else
12
+ runSimple(command)
13
+ end if
14
+ end run
15
+ on runSimple(command)
16
+ tell application "Terminal"
17
+ activate
18
+ set newTab to do script(command)
19
+ end tell
20
+ return newTab
21
+ end runSimple
22
+ on runWithProfile(command, profile)
23
+ set newTab to runSimple(command)
24
+ tell application "Terminal" to set current settings of newTab to (first settings set whose name is profile)
25
+ end runWithProfile
26
+ ' | osascript - "$@" > /dev/null
data/lib/XSpear.rb CHANGED
@@ -643,7 +643,7 @@ class XspearScan
643
643
  attack = ""
644
644
  dparams = params
645
645
  dparams.each do |d|
646
- attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI::encode(payload)}" if p[0] == d[0]
646
+ attack = uri.query.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
647
647
  #d[1] = p[1] + payload if p[0] == d[0]
648
648
  end
649
649
  result.push("inject": 'url',"param":p[0] ,"type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
@@ -658,7 +658,8 @@ class XspearScan
658
658
  attack = ""
659
659
  dparams = params
660
660
  dparams.each do |d|
661
- attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI::encode(payload)}" if p[0] == d[0]
661
+ attack = @data.sub "#{d[0]}=#{d[1]}","#{d[0]}=#{d[1]}#{URI.encode_www_form_component(payload)}" if p[0] == d[0]
662
+ # #45 Issue, URI::encode to URI.encode_www_form_component
662
663
  #d[1] = p[1] + payload if p[0] == d[0]
663
664
  end
664
665
  result.push("inject": 'body', "param":p[0], "type": type, "query": attack, "pattern": pattern, "desc": desc, "category": category, "callback": callback)
@@ -669,10 +670,10 @@ class XspearScan
669
670
  if callback == CallbackXSSSelenium
670
671
  begin
671
672
  puri = URI.parse(@url)
672
- puri.path = puri.path+URI.encode("/"+pattern)
673
+ puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
673
674
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
674
675
  puri = URI.parse(@url)
675
- puri.path = puri.path+URI.encode(pattern)
676
+ puri.path = puri.path+URI.encode_www_form_component(pattern)
676
677
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
677
678
  rescue
678
679
  # bypass
@@ -686,10 +687,10 @@ class XspearScan
686
687
  if callback == CallbackXSSSelenium
687
688
  begin
688
689
  puri = URI.parse(@url)
689
- puri.path = puri.path+URI.encode("/"+pattern)
690
+ puri.path = puri.path+URI.encode_www_form_component("/"+pattern)
690
691
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
691
692
  puri = URI.parse(@url)
692
- puri.path = puri.path+URI.encode(pattern)
693
+ puri.path = puri.path+URI.encode_www_form_component(pattern)
693
694
  result.push("inject": 'url',"param":"STATIC" ,"type": type, "query": puri.to_s, "pattern": "[PATH]", "desc": "[Path]"+desc, "category": category, "callback": callback)
694
695
  rescue
695
696
  # bypass
@@ -1,3 +1,3 @@
1
1
  module XSpear
2
- VERSION = "1.3.1"
2
+ VERSION = "1.3.2"
3
3
  end
metadata CHANGED
@@ -1,14 +1,14 @@
1
1
  --- !ruby/object:Gem::Specification
2
2
  name: XSpear
3
3
  version: !ruby/object:Gem::Version
4
- version: 1.3.1
4
+ version: 1.3.2
5
5
  platform: ruby
6
6
  authors:
7
7
  - hahwul
8
8
  autorequire:
9
9
  bindir: exe
10
10
  cert_chain: []
11
- date: 2019-12-29 00:00:00.000000000 Z
11
+ date: 2020-02-01 00:00:00.000000000 Z
12
12
  dependencies:
13
13
  - !ruby/object:Gem::Dependency
14
14
  name: colorize
@@ -186,11 +186,14 @@ files:
186
186
  - LICENSE.txt
187
187
  - README.md
188
188
  - Rakefile
189
+ - XSpear-1.3.1.gem
189
190
  - XSpear.gemspec
190
191
  - bin/console
191
192
  - bin/setup
192
193
  - config.json
193
194
  - exe/XSpear
195
+ - forBurp/README.md
196
+ - forBurp/otwa.sh
194
197
  - lib/XSpear.rb
195
198
  - lib/XSpear/XSpearRepoter.rb
196
199
  - lib/XSpear/banner.rb