Adding proxy support!

README.md

@@ -86,7 +86,7 @@ https://example.com/?p=first&q=Gxss
 # TODO
 
 - [ ] Add Post Method Support.
-- [ ] Add Proxy Support.
+- [x] Add Proxy Support.
 - [x] Add an option for user to add there own headers
 - [x] Add an option for User-Agent
 

main.go

@@ -2,6 +2,7 @@ package main
 
 import (
 	"bufio"
+	"bytes"
 	"crypto/tls"
 	"flag"
 	"fmt"
@@ -18,12 +19,14 @@ import (
 )
 
 var (
-	concurrency   int
-	verbose       bool
-	outputFile    string
-	payload       string
-	useragent     string
-	customHeaders string
+	concurrency int
+	verbose     bool
+	outputFile  string
+	payload     string
+	useragent   string
+	proxy       string
+	requestData string
+	method      string
 )
 
 type customh []string
@@ -55,12 +58,14 @@ func main() {
 	flag.BoolVar(&verbose, "v", false, "Verbose mode")
 	flag.StringVar(&payload, "p", "Gxss", "Payload you want to Send to Check Reflection")
 	flag.StringVar(&outputFile, "o", "", "Save Result to OutputFile")
+	flag.StringVar(&requestData, "d", "", "Request data for POST based reflection testing")
+	flag.StringVar(&proxy, "x", "", "Proxy URL. Example: http://127.0.0.1:8080")
 	flag.StringVar(&useragent, "u", "Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/86.0.4240.111 Safari/537.36", "Set Custom User agent. Default is Mozilla")
 	flag.Var(&custhead, "h", "Set Custom Header.")
 
 	flag.Parse()
 
-	if verbose == true {
+	if verbose {
 		banner()
 	}
 
@@ -78,7 +83,7 @@ func main() {
 			for i := 0; i < concurrency; i++ {
 				wg.Add(1)
 				go func() {
-					testref(payload, verbose, outputFile)
+					testref(payload, verbose, outputFile, requestData)
 					wg.Done()
 				}()
 				wg.Wait()
@@ -90,7 +95,7 @@ func main() {
 			for i := 0; i < concurrency; i++ {
 				wg.Add(1)
 				go func() {
-					testref(payload, verbose, outputFile)
+					testref(payload, verbose, outputFile, requestData)
 					wg.Done()
 				}()
 				wg.Wait()
@@ -99,12 +104,12 @@ func main() {
 	} else {
 		flag.PrintDefaults()
 	}
-	if verbose == true {
+	if verbose {
 		fmt.Println("\nFinished Checking, Thank you for using Gxss.")
 	}
 }
 
-func testref(payload string, verbose bool, outputFile string) {
+func testref(payload string, verbose bool, outputFile string, requestData string) {
 	time.Sleep(500 * time.Microsecond)
 	scanner := bufio.NewScanner(os.Stdin)
 	for scanner.Scan() {
@@ -126,23 +131,41 @@ func checkreflection(link string) {
 		u = v
 	}
 
-	if verbose == true {
+	if verbose {
 		fmt.Println("[+] Testing URL : " + link)
 	}
 	q, err := url.ParseQuery(u.RawQuery)
 	if err != nil {
 		fmt.Printf("Error is %e", err)
 	}
+
+	if requestData != "" {
+		method = "POST"
+		q, err = url.ParseQuery(requestData)
+	} else {
+		method = "GET"
+	}
+
+	if err != nil {
+		fmt.Println(err)
+	}
+
 	for key, value := range q {
 		var tm string = value[0]
 		q.Set(key, payload)
-		u.RawQuery = q.Encode()
-		_, body, _ := requestfunc(u.String())
+		if method == "GET" {
+			u.RawQuery = q.Encode()
+		}
+		if method == "POST" {
+			requestData = q.Encode()
+		}
+		_, body, _ := requestfunc(u.String(), requestData, method)
 
 		re := regexp.MustCompile(payload)
 		match := re.FindStringSubmatch(body)
+
 		if match != nil {
-			if verbose == true {
+			if verbose {
 				fmt.Printf("Url : %q\n", u)
 				fmt.Printf("Reflected Param : %q\n", key)
 			} else {
@@ -165,15 +188,31 @@ func checkreflection(link string) {
 
 //removed gorequest for more granular access to setting headers.
 
-func requestfunc(u string) (resp *http.Response, body string, errs []error) {
+func requestfunc(u string, requestData string, method string) (resp *http.Response, body string, errs []error) {
 	http.DefaultTransport.(*http.Transport).TLSClientConfig = &tls.Config{InsecureSkipVerify: true}
+
+	if proxy != "" {
+		proxyUrl, err := url.Parse(proxy)
+		http.DefaultTransport = &http.Transport{Proxy: http.ProxyURL(proxyUrl)}
+		if err != nil {
+			fmt.Println(err)
+		}
+	}
+
 	client := &http.Client{
 		CheckRedirect: redirectPolicyFunc,
 	}
 
-	req, err := http.NewRequest("GET", u, nil)
+	req, err := http.NewRequest(method, u, bytes.NewBufferString(requestData))
 	req.Header.Add("User-Agent", useragent)
 
+	if err != nil {
+		fmt.Println(err)
+	}
+
+	if method == "POST" {
+		req.Header.Add("Content-Type", "application/x-www-form-urlencoded")
+	}
 	//splitting headers and values by using : as separator
 	for _, v := range custhead {
 		s := strings.SplitN(v, ":", 2)
@@ -185,7 +224,7 @@ func requestfunc(u string) (resp *http.Response, body string, errs []error) {
 	if err != nil {
 		fmt.Println(err)
 	}
-	if verbose == true {
+	if verbose {
 		fmt.Println(string(requestDump))
 	}
 	resp, err = client.Do(req)