cheetz / reddit_xss Goto Github PK

Hello! Running this tool seems to produce an error with indexes out of range - I don't think this is my issue but I've been wrong before - this is the code as generated by a git clone.

[] Reddit XSS scrape in progress
[] Press CTRL-C to Stop. Output will be saved to output_xss.txt
Traceback (most recent call last):
File "./reddit_xss.py", line 44, in
app.run(url)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 36, in regex
self.run(next_string)
File "./reddit_xss.py", line 16, in run
self.regex(resolve_response)
File "./reddit_xss.py", line 34, in regex
next_string = "http://www.reddit.com/r/xss/?count="+link[0][0]+"&after="+link[0][1]
IndexError: list index out of range

Hi Peter,

First of all, your books are just awesome!
I got an idea in order to improve this script, I would like to get your feedback on it. If we could somehow have the reddit users filters that have been bypassed by theirs evasion methods, we could simply using some regex directly get a working bypass method.
I explain, let's say that redit_xss.py takes one argument which is the filtered payload like:
reddit_xss.py &gtscript&ltalert(1)&gtscript&lt (it is just a non-accurate example)
By using a simple grep on the output_xss with some regex operations to ignored the payload used in the arg[1] we might able to find an occurence of the same filter. Therefore, if the reddit user posted his bypass alongside with the filter, for us it would be game over.
XSS evasion made trivial thanks to crowd-sourcing. :)

Sorry if I haven't been very clear, english is not my native tongue.

Best regards,
Alexandre