Skip to content

Commit 64de88d

Browse files
jaymoulinjaymoulin
committed
Initial revision (3.1.4)
0 parents  commit 64de88d

File tree

9 files changed

+282
-0
lines changed

9 files changed

+282
-0
lines changed

‎.github/ISSUE_TEMPLATE.md

Lines changed: 57 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,57 @@
1+
<!--
2+
If you are reporting a new issue, make sure that we do not have any duplicates
3+
already open. You can ensure this by searching the issue list for this
4+
repository. If there is a duplicate, please close your issue and add a comment
5+
to the existing issue instead.
6+
7+
If you suspect your issue is a bug, please edit your issue description to
8+
include the BUG REPORT INFORMATION shown below. If you fail to provide this
9+
information within 7 days, we cannot debug your issue and will close it. We
10+
will, however, reopen it if you later provide the information.
11+
12+
For more information about reporting issues, see
13+
https://github.com/femtopixel/docker-xsstrike/blob/master/CONTRIBUTING.md
14+
15+
Please not that I am not part of XSStrike or Docker teams. So please check this
16+
is not related to one or the other product befroe opening an issue.
17+
18+
You do NOT have to include this information if this is a FEATURE REQUEST
19+
20+
If you find this useful, please consider starring the repo and/or donating.
21+
People showing interest attract more attention ;)
22+
-->
23+
24+
**Output of `docker inspect femtopixel/xsstrike --format='{{index .Config.Labels.version}}'`:**
25+
26+
```
27+
(paste your output here)
28+
```
29+
30+
**Description**
31+
32+
<!--
33+
Briefly describe the problem you are having in a few paragraphs.
34+
-->
35+
36+
**Command line I used to start the container**
37+
38+
**Steps to reproduce the issue:**
39+
1.
40+
2.
41+
3.
42+
43+
**Describe the results you received:**
44+
45+
46+
**Describe the results you expected:**
47+
48+
49+
**Additional information you deem important (e.g. issue happens only occasionally):**
50+
51+
**Provide some logs**
52+
53+
<details>
54+
<pre>
55+
(paste logs)
56+
</pre>
57+
</details>

‎.gitignore

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,3 @@
1+
qemu-*-static
2+
*.yaml
3+
.Dockerfile

‎.travis.yml

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
sudo: required
2+
dist: xenial
3+
services:
4+
- docker
5+
6+
before_install:
7+
- sudo apt update && sudo apt install make -y
8+
- git clone https://github.com/estesp/manifest-tool && cd manifest-tool && git checkout v0.9.0 && sudo make && sudo make install && cd .. && rm -Rf manifest-tool
9+
- docker run --rm --privileged multiarch/qemu-user-static:register
10+
- sudo apt install -y qemu qemu-user-static qemu-user binfmt-support
11+
12+
script:
13+
- echo "$DOCKER_HUB_PASSWORD" | docker login -u "$DOCKER_HUB_LOGIN" --password-stdin
14+
- travis_wait 100 make build
15+
16+
deploy:
17+
provider: script
18+
script:
19+
- make publish latest
20+
on:
21+
branch: master

‎CONTRIBUTING.md

Lines changed: 24 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,24 @@
1+
How to Contribute
2+
=================
3+
4+
This project welcomes your contribution. There are several ways to help out:
5+
6+
* Create an [issue](https://github.com/femtopixel/docker-xsstrike/issues/) on GitHub,
7+
if you have found a bug or have an idea for a feature
8+
* Write test cases for open bug issues
9+
* Write patches for open bug/feature issues
10+
11+
Issues
12+
------
13+
14+
* Submit an [issue](https://github.com/femtopixel/xsstrike/issues/)
15+
* Make sure it does not already exist.
16+
* Clearly describe the issue including steps to reproduce, when it is a bug.
17+
* Make sure you note the version you use.
18+
19+
Additional Resources
20+
--------------------
21+
22+
* [Existing issues](https://github.com/femtopixel/docker-xsstrike/issues/)
23+
* [General GitHub documentation](https://help.github.com/)
24+
* [GitHub pull request documentation](https://help.github.com/send-pull-requests/)

‎Dockerfile

Lines changed: 20 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,20 @@
1+
FROM python:alpine as builder
2+
3+
COPY qemu-*-static /usr/bin/
4+
5+
FROM builder
6+
7+
ARG VERSION=3.1.4
8+
ARG VERSION_LABEL=3.1.4
9+
LABEL maintainer="Jay MOULIN <jaymoulin@gmail.com> <https://twitter.com/MoulinJay>"
10+
LABEL version=${VERSION_LABEL}
11+
#Use alpine to save disk space
12+
RUN apk add --no-cache git bash &&\
13+
git clone https://github.com/s0md3v/XSStrike.git &&\
14+
cd ./XSStrike &&\
15+
git checkout ${VERSION} &&\
16+
pip install -U pip &&\
17+
pip install -r requirements.txt &&\
18+
apk del --purge git
19+
WORKDIR /XSStrike/
20+
ENTRYPOINT ["python","xsstrike.py"]

‎LICENSE

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
MIT License
2+
3+
Copyright (c) 2017 FemtoPixel
4+
5+
Permission is hereby granted, free of charge, to any person obtaining a copy
6+
of this software and associated documentation files (the "Software"), to deal
7+
in the Software without restriction, including without limitation the rights
8+
to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
9+
copies of the Software, and to permit persons to whom the Software is
10+
furnished to do so, subject to the following conditions:
11+
12+
The above copyright notice and this permission notice shall be included in all
13+
copies or substantial portions of the Software.
14+
15+
THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
16+
IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
17+
FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
18+
AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
19+
LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
20+
OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
21+
SOFTWARE.

‎Makefile

Lines changed: 21 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,21 @@
1+
VERSION ?= 3.1.4
2+
CACHE ?= --no-cache=1
3+
FULLVERSION ?= ${VERSION}
4+
archs ?= arm32v7 amd64 i386 arm64v8 arm32v6
5+
6+
.PHONY: docker build publish latest
7+
docker: build publish latest
8+
build:
9+
cp -r /usr/bin/qemu-*-static .
10+
$(foreach arch,$(archs), \
11+
cat Dockerfile | sed "s/FROM python:alpine/FROM ${arch}\/python:alpine/g" > .Dockerfile; \
12+
docker build -t femtopixel/xsstrike:${VERSION}-$(arch) --build-arg VERSION=${VERSION} --build-arg VERSION_LABEL=${VERSION}-$(arch) -f .Dockerfile ${CACHE} .;\
13+
)
14+
publish:
15+
docker push femtopixel/xsstrike
16+
cat manifest.yml | sed "s/\$$VERSION/${VERSION}/g" > manifest.yaml
17+
cat manifest.yaml | sed "s/\$$FULLVERSION/${FULLVERSION}/g" > manifest2.yaml
18+
mv manifest2.yaml manifest.yaml
19+
manifest-tool push from-spec manifest.yaml
20+
latest: build
21+
FULLVERSION=latest VERSION=${VERSION} make publish

‎README.md

Lines changed: 86 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,86 @@
1+
![logo](logo.png "logo")
2+
3+
XSStrike - Docker Image
4+
==========================
5+
6+
[![latest release](https://img.shields.io/github/release/femtopixel/docker-xsstrike.svg "latest release")](http://github.com/femtopixel/docker-xsstrike/releases)
7+
[![Docker Pulls](https://img.shields.io/docker/pulls/femtopixel/xsstrike.svg)](https://hub.docker.com/r/femtopixel/xsstrike/)
8+
[![Docker stars](https://img.shields.io/docker/stars/femtopixel/xsstrike.svg)](https://hub.docker.com/r/femtopixel/xsstrike/)
9+
[![Bitcoin donation](https://github.com/jaymoulin/jaymoulin.github.io/raw/master/btc.png "Bitcoin donation")](https://m.freewallet.org/id/374ad82e/btc)
10+
[![Litecoin donation](https://github.com/jaymoulin/jaymoulin.github.io/raw/master/ltc.png "Litecoin donation")](https://m.freewallet.org/id/374ad82e/ltc)
11+
[![PayPal donation](https://github.com/jaymoulin/jaymoulin.github.io/raw/master/ppl.png "PayPal donation")](https://www.paypal.me/jaymoulin)
12+
[![Buy me a coffee](https://www.buymeacoffee.com/assets/img/custom_images/orange_img.png "Buy me a coffee")](https://www.buymeacoffee.com/3Yu8ajd7W)
13+
14+
15+
This image allows you to have [XSStrike](https://github.com/s0md3v/XSStrike) installed easily thanks to Docker.
16+
17+
Usage
18+
---
19+
20+
```bash
21+
docker run --rm -ti femtopixel/xsstrike
22+
```
23+
24+
```
25+
26+
XSStrike v3.1.4
27+
28+
29+
usage: xsstrike.py [-h] [-u target] [--data paramdata] [-e encode] [--fuzzer]
30+
[--update] [--timeout timeout] [--proxy] [--params]
31+
[--crawl] [--json] [--path] [--seeds args_seeds]
32+
[-f args_file] [-l level] [--headers [add_headers]]
33+
[-t threadcount] [-d delay] [--skip] [--skip-dom] [--blind]
34+
[--console-log-level {debug,info,run,good,warning,error,critical,vuln}]
35+
[--file-log-level {debug,info,run,good,warning,error,critical,vuln}]
36+
[--log-file log_file]
37+
38+
optional arguments:
39+
-h, --help show this help message and exit
40+
-u target, --url target
41+
url
42+
--data paramdata post data
43+
-e encode, --encode encode
44+
encode payloads
45+
--fuzzer fuzzer
46+
--update update
47+
--timeout timeout timeout
48+
--proxy use prox(y|ies)
49+
--params find params
50+
--crawl crawl
51+
--json treat post data as json
52+
--path inject payloads in the path
53+
--seeds args_seeds load crawling seeds from a file
54+
-f args_file, --file args_file
55+
load payloads from a file
56+
-l level, --level level
57+
level of crawling
58+
--headers [add_headers]
59+
add headers
60+
-t threadcount, --threads threadcount
61+
number of threads
62+
-d delay, --delay delay
63+
delay between requests
64+
--skip don't ask to continue
65+
--skip-dom skip dom checking
66+
--blind inject blind xss payload while crawling
67+
--console-log-level {debug,info,run,good,warning,error,critical,vuln}
68+
console logging level
69+
--file-log-level {debug,info,run,good,warning,error,critical,vuln}
70+
file logging level
71+
--log-file log_file name of the file to log
72+
73+
```
74+
75+
Just pass the parameters after the command. (eg. `docker run --rm -ti femtopixel/xsstrike -u https://www.example.com`)
76+
77+
Appendixes
78+
---
79+
80+
### Install Docker
81+
82+
If you don't have Docker installed yet, you can do it easily in one line using this command
83+
84+
```
85+
curl -sSL "https://gist.githubusercontent.com/jaymoulin/e749a189511cd965f45919f2f99e45f3/raw/0e650b38fde684c4ac534b254099d6d5543375f1/ARM%2520(Raspberry%2520PI)%2520Docker%2520Install" | sudo sh && sudo usermod -aG docker $USER
86+
```

‎manifest.yml

Lines changed: 29 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,29 @@
1+
image: femtopixel/xsstrike:$FULLVERSION
2+
manifests:
3+
-
4+
image: femtopixel/xsstrike:$VERSION-arm32v6
5+
platform:
6+
architecture: arm
7+
variant: v6
8+
os: linux
9+
-
10+
image: femtopixel/xsstrike:$VERSION-arm64v8
11+
platform:
12+
architecture: arm64
13+
os: linux
14+
-
15+
image: femtopixel/xsstrike:$VERSION-arm64v8
16+
platform:
17+
architecture: arm
18+
variant: v8
19+
os: linux
20+
-
21+
image: femtopixel/xsstrike:$VERSION-amd64
22+
platform:
23+
architecture: amd64
24+
os: linux
25+
-
26+
image: femtopixel/xsstrike:$VERSION-i386
27+
platform:
28+
architecture: 386
29+
os: linux

0 commit comments

Comments
 (0)