Browse Source

more advanced anti false-positives check

epsylon 4 years ago
parent
commit
c8e77231c5
1 changed files with 1 additions and 1 deletions
  1. 1 1
      core/main.py

+ 1 - 1
core/main.py

@@ -1425,7 +1425,7 @@ class xsser(EncoderDecoder, XSSerReporter):
             if str('/>' + hashing) in c_body or str('href=' + dest_url + hashing) in c_body or str('content=' + dest_url + hashing) in c_body:
                 self.report("[Info] Reply looks like a 'false positive' -> [DISCARDING!]\n")
                 self.add_failure(dest_url, payload, hashing, query_string, orig_url, method) # failed!
-            elif str(hashing+","):
+            elif str(hashing+",") in c_body or str(hashing+'","') in c_body:
                 self.report("[Info] Reply looks like a 'false positive' -> [DISCARDING!]\n")
                 self.add_failure(dest_url, payload, hashing, query_string, orig_url, method) # failed!
             else: