Skip to content

Commit

Permalink
Update README (#119)
Browse files Browse the repository at this point in the history
  • Loading branch information
hahwul authored Sep 27, 2020
1 parent b7d21a6 commit 4dbeed8
Showing 1 changed file with 1 addition and 0 deletions.
1 change: 1 addition & 0 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -30,6 +30,7 @@ Mode: `url` `sxss` `pipe` `file` `server`
| ------------- | ----------------------------- | ------------------------------------------------------------ |
| Discovery | Parameter analysis | - Find reflected param<br />- Find alive/bad special chars, event handler and attack code <br />- Identification of injection points(HTML/JS/Attribute) <br /> `inHTML-none` `inJS-none` `inJS-double` `inJS-single` `inJS-backtick` `inATTR-none` `inATTR-double` `inATTR-single` |
| | Static analysis | - Check bad-header like CSP, XFO, etc.. with req/res base |
| | Another vuln analysis | - Test for Another Vulnerabilities (e.g sqli) |
| | Parameter Mining | - Find new param with Dictonary attack (default is [GF-Patterns](https://github.com/1ndianl33t/Gf-Patterns))<br />- Support custom dictonary file (`--mining-dict-word`)<br />- FInd new param with DOM |
| | Built-in Grepping | - It Identify the basic info leak of SSTi, Credential, SQL Error, and so on |
| Scanning | XSS Scanning | - Reflected xss / stored xss <br />- DOM base verifying<br />- Blind XSS testing with param, header(`-b` , `--blind` options)<br />- Only testing selected parameters (`-p`, `--param`)<br />- Only testing parameter analysis (`--only-discovery`) |
Expand Down

0 comments on commit 4dbeed8

Please sign in to comment.