search

epsylon / xsser

Cross Site "Scripter" (aka XSSer) is an automatic -framework- to detect, exploit and report XSS vulnerabilities in web-based applications.
https://xsser.03c8.net
1.17k stars 238 forks source link

Internal error getting -payloads- error #2

Closed dschu-lab closed 9 years ago

dschu-lab commented 9 years ago

Hey there,

I'm trying to test my application with your tool, but I'm stuck on this error:

Traceback (most recent call last):
  File "/Users/..../xsser-public/xsser-public/core/main.py", line 1437, in try_running
    return func(*args)
  File "/Users/..../xsser-public/xsser-public/core/main.py", line 285, in get_payloads
    payloads_css    = core.fuzzing.vectors.vectors_css
AttributeError: 'module' object has no attribute 'vectors_css'

Any idea what's going wrong?

epsylon commented 9 years ago

Hi,

Yes I know. This was a non-complete development did for Google Summer of Code about a module to inject javascript over CSS styles. Try to comment any reference on code to run it without problems...

Or download this package: http://xsser.03c8.net/xsser/xsser_1.6-1.tar.gz

I will fix it soon.

Thanks for your report.

epsylon commented 9 years ago

Ok, fixed. Pull again and tell me.

dschu-lab commented 9 years ago

Thanks for your fast reply. After pulling the current state, I can't open XSSER:

from XSSer.main import xsser
ImportError: No module named XSSer.main
epsylon commented 9 years ago

Do you have a folder named: "core" or "XSSer"?. Try to clone repo again.

dschu-lab commented 9 years ago

No there is no folder named XSSer... It's because I'm running on a journaled HFS+ which is not case-sensitive. Ha ha!

epsylon commented 9 years ago

With last commit you should have it. Btw, I will try to update XSSer code soon. Version "1.7b - Total Swarm" is practically ready...

dschu-lab commented 9 years ago

Thanks!