Major rewrite

requirements.txt

@@ -0,0 +1,5 @@
+bs4
+requests
+stringdist
+tld
+yattag

setup.py

@@ -1,9 +1,9 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 #    XSRF Probe     #
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 
 # Author: 0xInfection
 # This module requires XSRFProbe
@@ -12,40 +12,36 @@
 import io
 from setuptools import setup, find_packages
 from os import path
+
 this_directory = path.abspath(path.dirname(__file__))
-with io.open(path.join(this_directory, 'README.md'), encoding='utf-8') as f:
+with io.open(path.join(this_directory, "README.md"), encoding="utf-8") as f:
     desc = f.read()
 
 setup(
-    name='xsrfprobe',
-    version=__import__('xsrfprobe').__version__,
-    description='The Prime Cross Site Request Forgery (CSRF) Audit & Exploitation Toolkit',
+    name="xsrfprobe",
+    version=__import__("xsrfprobe").__version__,
+    description="The Prime Cross Site Request Forgery (CSRF) Audit & Exploitation Toolkit",
     long_description=desc,
-    long_description_content_type='text/markdown',
-    author='Pinaki Mondal',
-    author_email='theinfecteddrake@gmail.com',
-    license='GPLv3',
-    url='https://github.com/0xInfection/XSRFProbe',
-    download_url='https://github.com/0xInfection/XSRFProbe/archive/v%s.zip' % __import__('xsrfprobe').__version__,
+    long_description_content_type="text/markdown",
+    author="Pinaki Mondal",
+    author_email="theinfecteddrake@gmail.com",
+    license="GPLv3",
+    url="https://github.com/0xInfection/XSRFProbe",
+    download_url="https://github.com/0xInfection/XSRFProbe/archive/v%s.zip"
+    % __import__("xsrfprobe").__version__,
     packages=find_packages(),
-    scripts=['xsrfprobe/bin/xsrfprobe'],
-    install_requires=[
-        'requests',
-        'bs4',
-        'stringdist',
-        'tld',
-        'yattag'
-    ],
+    scripts=["xsrfprobe/bin/xsrfprobe"],
+    install_requires=["requests", "bs4", "stringdist", "tld", "yattag"],
     classifiers=[
-        'Development Status :: 5 - Production/Stable',
-        'Intended Audience :: System Administrators',
-        'Intended Audience :: Developers',
-        'Intended Audience :: Information Technology',
-        'Operating System :: OS Independent',
-        'Topic :: Internet',
-        'Topic :: Security',
-        'License :: OSI Approved :: GNU General Public License v3 (GPLv3)',
-        'Programming Language :: Python :: 3',
+        "Development Status :: 5 - Production/Stable",
+        "Intended Audience :: System Administrators",
+        "Intended Audience :: Developers",
+        "Intended Audience :: Information Technology",
+        "Operating System :: OS Independent",
+        "Topic :: Internet",
+        "Topic :: Security",
+        "License :: OSI Approved :: GNU General Public License v3 (GPLv3)",
+        "Programming Language :: Python :: 3",
     ],
-    keywords=['csrf', 'xsrf', 'appsec', 'vulnerability scanner', 'webapps', 'hacking'],
+    keywords=["csrf", "xsrf", "appsec", "vulnerability scanner", "webapps", "hacking"],
 )

xsrfprobe/__init__.py

@@ -1,13 +1,13 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 #    XSRF Probe     #
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 
 # Author: 0xInfection
 # This module requires XSRFProbe
 # https://github.com/0xInfection/XSRFProbe
 
-__version__ = '2.3.1'
-__license__ = 'GNU General Public License v3 (GPLv3)'
+__version__ = "4.4.29"
+__license__ = "GNU General Public License v3 (GPLv3)"

xsrfprobe/bin/xsrfprobe

@@ -9,7 +9,15 @@
 # This module requires XSRFProbe
 # https://github.com/0xInfection/XSRFProbe
 
+import os
+import sys
+
+# Allow loading of the module from the path where we are when you
+#  didn't install it using pip
+SCRIPT_DIR = os.path.realpath(os.path.dirname("."))
+sys.path.append(SCRIPT_DIR)
+
 from xsrfprobe import xsrfprobe
 
 if __name__ == '__main__':
-    xsrfprobe.startEngine()
+    xsrfprobe.startEngine()

xsrfprobe/core/__init__.py

@@ -1,9 +1,9 @@
 #!/usr/bin/env python3
 # -*- coding: utf-8 -*-
 
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 #    XSRF Probe     #
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 
-#This module requires XSRFProbe
-#https://github.com/0xInfection/XSRFProbe
+# This module requires XSRFProbe
+# https://github.com/0xInfection/XSRFProbe

xsrfprobe/core/banner.py

@@ -1,48 +1,221 @@
 #!/usr/bin/env python3
-#coding: utf-8
+# coding: utf-8
 
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 #    XSRF Probe     #
-#-:-:-:-:-:-:-::-:-:#
+# -:-:-:-:-:-:-::-:-:#
 
-#Author: 0xInfection
-#This module requires XSRF-Probe
-#https://github.com/0xInfection/XSRF-Probe
+# Author: 0xInfection
+# This module requires XSRF-Probe
+# https://github.com/0xInfection/XSRF-Probe
 
 # Just for some fancy benner to appear at beginning
 
 import time
 from xsrfprobe import __version__
-from xsrfprobe.core.colors import *
+import xsrfprobe.core.colors
+
+colors = xsrfprobe.core.colors.color()
+
+SLEEP_TIME = 0
+
 
 def banner():
+    """Display the program banner"""
+    print("\n\n")
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.ORANGE
+        + "     _____       _____       _____      _____       _____                                    "
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.RED
+        + "  __"
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "__ "
+        + colors.ORANGE
+        + "  |_  "
+        + colors.RED
+        + "__"
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "___ "
+        + colors.ORANGE
+        + " |_  "
+        + colors.RED
+        + "__"
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "___  "
+        + colors.ORANGE
+        + "|_  "
+        + colors.RED
+        + "_"
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "____ "
+        + colors.ORANGE
+        + "|_"
+        + colors.RED
+        + "   _"
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "____ "
+        + colors.ORANGE
+        + "|_ "
+        + colors.RED
+        + " _____   _____  ______  ______  "
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.RED
+        + " \  `  /    "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|   ___|   "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|  _  _|   "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|   ___|  "
+        + colors.ORANGE
+        + "| "
+        + colors.RED
+        + "|   _  |  "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|  _ ,' /     \|  _   )|   ___| "
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.RED
+        + "  >   <     "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + " `-.`-.    "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|     \    "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|   ___|  "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + " |    __|  "
+        + colors.ORANGE
+        + "|"
+        + colors.RED
+        + "|     \ |  -  || |_  { |   ___| "
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.RED
+        + " /__/__\   "
+        + colors.ORANGE
+        + "_|"
+        + colors.RED
+        + "|______|  "
+        + colors.ORANGE
+        + "_|"
+        + colors.RED
+        + "|__|\__\ "
+        + colors.ORANGE
+        + " _|"
+        + colors.RED
+        + "|___|   "
+        + colors.ORANGE
+        + " _|"
+        + colors.RED
+        + " |___|   "
+        + colors.ORANGE
+        + " _|"
+        + colors.RED
+        + "|__|\__\\\_____/|______)|______| "
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.ORANGE
+        + "    |_____|     |_____|     |_____|    |_____|     |_____| \n\n"
+    )
+    time.sleep(SLEEP_TIME)
+
 
-    print('\n\n')
-    time.sleep(0.05)
-    print(color.ORANGE+'     _____       _____       _____      _____       _____                                    ')
-    time.sleep(0.05)
-    print(color.RED+'  __'+color.ORANGE+'|'+color.RED+'__ '+color.ORANGE+'  |_  '+color.RED+'__'+color.ORANGE+'|'+color.RED+'___ '+color.ORANGE+' |_  '+color.RED+'__'+color.ORANGE+'|'+color.RED+'___  '+color.ORANGE+'|_  '+color.RED+'_'+color.ORANGE+'|'+color.RED+'____ '+color.ORANGE+'|_'+color.RED+'   _'+color.ORANGE+'|'+color.RED+'____ '+color.ORANGE+'|_ '+color.RED+' _____   _____  ______  ______  ')
-    time.sleep(0.05)
-    print(color.RED+" \  `  /    "+color.ORANGE+'|'+color.RED+'|   ___|   '+color.ORANGE+'|'+color.RED+'|  _  _|   '+color.ORANGE+'|'+color.RED+'|   ___|  '+color.ORANGE+'| '+color.RED+'|   _  |  '+color.ORANGE+"|"+color.RED+"|  _ ,' /     \|  _   )|   ___| ")
-    time.sleep(0.05)
-    print(color.RED+'  >   <     '+color.ORANGE+'|'+color.RED+' `-.`-.    '+color.ORANGE+'|'+color.RED+'|     \    '+color.ORANGE+'|'+color.RED+'|   ___|  '+color.ORANGE+'|'+color.RED+' |    __|  '+color.ORANGE+'|'+color.RED+'|     \ |  -  || |_  { |   ___| ')
-    time.sleep(0.05)
-    print(color.RED+' /__/__\   '+color.ORANGE+'_|'+color.RED+'|______|  '+color.ORANGE+'_|'+color.RED+'|__|\__\ '+color.ORANGE+' _|'+color.RED+'|___|   '+color.ORANGE+' _|'+color.RED+' |___|   '+color.ORANGE+' _|'+color.RED+'|__|\__\\\_____/|______)|______| ')
-    time.sleep(0.05)
-    print(color.ORANGE+'    |_____|     |_____|     |_____|    |_____|     |_____| \n\n')
-    time.sleep(0.05)
-
-def banabout(): # some fancy banner stuff :p
-
-    print(color.BLUE+'   [---]            '+color.GREY+'XSRFProbe,'+color.RED+' A'+color.ORANGE+' Cross Site Request Forgery '+color.RED+'Audit Toolkit          '+color.BLUE+'[---]')
-    time.sleep(0.05)
-    print(color.BLUE+'   [---]                                                                           [---]')
-    time.sleep(0.05)
-    print(color.BLUE+'   [---]   '+color.PURPLE+'                    '+color.GREEN+'~  Author : '+color.CYAN+'Pinaki Mondal  ~                   '+color.BLUE+'     [---]')
-    time.sleep(0.05)
-    print(color.BLUE+'   [---]   '+color.CYAN+'                   ~  github.com / '+color.GREY+'0xInfection  ~                     '+color.BLUE+'  [---]')
-    time.sleep(0.05)
-    print(color.BLUE+'   [---]                                                                           [---]')
-    time.sleep(0.05)
-    print(color.BLUE+'   [---]  '+color.ORANGE+'                         ~  Version '+color.RED+__version__+color.ORANGE+'  ~                           '+color.BLUE+'  [---]\n')
-    time.sleep(0.05)
+def banabout():  # some fancy banner stuff :p
+    print(
+        colors.BLUE
+        + "   [---]            "
+        + colors.GREY
+        + "XSRFProbe,"
+        + colors.RED
+        + " A"
+        + colors.ORANGE
+        + " Cross Site Request Forgery "
+        + colors.RED
+        + "Audit Toolkit          "
+        + colors.BLUE
+        + "[---]"
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.BLUE
+        + "   [---]                                                                           [---]"
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.BLUE
+        + "   [---]   "
+        + colors.PURPLE
+        + "                    "
+        + colors.GREEN
+        + "~  Author : "
+        + colors.CYAN
+        + "Pinaki Mondal  ~                   "
+        + colors.BLUE
+        + "     [---]"
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.BLUE
+        + "   [---]   "
+        + colors.CYAN
+        + "                   ~  github.com / "
+        + colors.GREY
+        + "0xInfection  ~                     "
+        + colors.BLUE
+        + "  [---]"
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.BLUE
+        + "   [---]                                                                           [---]"
+    )
+    time.sleep(SLEEP_TIME)
+    print(
+        colors.BLUE
+        + "   [---]  "
+        + colors.ORANGE
+        + "                         ~  Version "
+        + colors.RED
+        + __version__
+        + colors.ORANGE
+        + "  ~                           "
+        + colors.BLUE
+        + "  [---]\n"
+    )
+    time.sleep(SLEEP_TIME)