search

pwn0sec / PwnXSS

PwnXSS: Vulnerability (XSS) scanner exploit
MIT License
738 stars 137 forks source link

quickly exit without crawling the website #12

Closed lyhistory closed 3 years ago

lyhistory commented 3 years ago

Describe the bug it just exit after printing the following log:

[02:38:16] [INFO] Starting PwnXSS...

[02:38:16] [INFO] Checking connection to: [02:38:16] [INFO] Connection estabilished 200

To Reproduce python3 pwnxss.py -u https://the-url/ --user-agent "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:82.0) Gecko/20100101 Firefox/82.0"

Expected behavior crawling the website

Screenshots image

Desktop (please complete the following information):

andripwn commented 3 years ago

Hi! @lyhistory we will fixed soon, now is holidays

bruvv commented 3 years ago

Same issue here, any update?

andripwn commented 3 years ago

Hi, @bruvv

Thank you for helping our project to make it better in the future, and sorry our team is on vacation until January, please wait for updates on 01/01/21, if you have any questions. please submit your questions at security@pwn0day.com

RAVIPRAJ commented 3 years ago

i think the problem here this for loop in crawler.py in line no 25

i f url.startswith("http://") or url.startswith("https://"): continue

        elif url.startswith("mailto:") or url.startswith("javascript:"):
            continue

        elif urljoin(base,url) in self.visited:
            continue

while crawling any website if that website urls contains https:// and there no href="/path/" than this for loop exit without crawling anything in website

andripwn commented 3 years ago

Hi @lyhistory this is has been fixed now , thank you.

Kind regards, @andripwn