Skip to content

Commit

Permalink
XXE bug fix
Browse files Browse the repository at this point in the history
  • Loading branch information
sagarpo committed Sep 25, 2018
1 parent cf99055 commit 6e5fed8
Showing 1 changed file with 2 additions and 1 deletion.
3 changes: 2 additions & 1 deletion modules/xxe.py
Original file line number Diff line number Diff line change
Expand Up @@ -24,6 +24,7 @@
Hello!\
'''


class xxe_scan:
def __init__(self):
self.port = 1111
Expand All @@ -42,6 +43,7 @@ def start_server(self):
logs.logging.info("XXE: Can't bind to port. Port may be busy or check firewall setting.")

def start_listening(self):
global vulnerable
try:
while True:
# Wait for 5 seconds
Expand All @@ -51,7 +53,6 @@ def start_listening(self):
if self.data and unique_id in self.data:
#External DTD is enable. URL is suspecious to XXE
self.conn.sendall(data)
global vulnerable
vulnerable = True

self.conn.close()
Expand Down

0 comments on commit 6e5fed8

Please sign in to comment.