attackstr 0.2.3

Grammar-based security payload generation - TOML-driven, composable, encoding-aware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

use attackstr::PayloadDb;

fn reverse(value: &str) -> String {
    value.chars().rev().collect()
}

fn main() -> Result<(), attackstr::PayloadError> {
    let mut db = PayloadDb::new();
    db.register_encoding("reverse", reverse);
    db.load_toml(
        r#"
[grammar]
name = "custom-encoding"
sink_category = "xss"

[[techniques]]
name = "basic"
template = "<svg/onload=alert(1)>"

[[encodings]]
name = "reverse"
transform = "reverse"
"#,
    )?;

    for payload in db.iter_payloads("xss").filter_map(Result::ok) {
        println!("{} [{}]", payload.text, payload.encoding);
    }

    Ok(())
}