cheetz / reddit_xss Goto Github PK
View Code? Open in Web Editor NEWReddit XSS Gather Tool
Reddit XSS Gather Tool
Hi Peter,
First of all, your books are just awesome!
I got an idea in order to improve this script, I would like to get your feedback on it. If we could somehow have the reddit users filters that have been bypassed by theirs evasion methods, we could simply using some regex directly get a working bypass method.
I explain, let's say that redit_xss.py takes one argument which is the filtered payload like:
reddit_xss.py >script<alert(1)>script< (it is just a non-accurate example)
By using a simple grep on the output_xss with some regex operations to ignored the payload used in the arg[1] we might able to find an occurence of the same filter. Therefore, if the reddit user posted his bypass alongside with the filter, for us it would be game over.
XSS evasion made trivial thanks to crowd-sourcing. :)
Sorry if I haven't been very clear, english is not my native tongue.
Best regards,
Alexandre
Hello! Running this tool seems to produce an error with indexes out of range - I don't think this is my issue but I've been wrong before - this is the code as generated by a git clone.
[] Reddit XSS scrape in progress
[] Press CTRL-C to Stop. Output will be saved to output_xss.txt
Traceback (most recent call last):
File "./reddit_xss.py", line 44, in
app.run(url)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 34, in regex
next_string = "http://www.reddit.com/r/xss/?count="+link[0][0]+"&after="+link[0][1]
IndexError: list index out of range
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.