search

skavngr / rapidscan

:new: The Multi-Tool Web Vulnerability Scanner.
GNU General Public License v2.0
1.69k stars 385 forks source link

Hardcoded HTTP protocol is in XSSer command #48

Open victorgawk opened 1 year ago

victorgawk commented 1 year ago

The test case 8/80 | XSSer - Checks for Cross-Site Scripting [XSS] Attacks.

The XSSer command have http:// hardcoded. This result in error if you test rapidscan against HTTPS urls.

https://github.com/skavngr/rapidscan/blob/cb5ea0ed9264a775044228a82870f65c58f99784/rapidscan.py#LL584C6-L584C6