Search the Community

Universal Reddit Scraper This is a universal Reddit scraper that can scrape Subreddits, Redditors, and comments on posts. Scrape speeds will be determined by the speed of your internet connection. Changelog v3.1.2 New in 3.1.2 URS will create sub-directories within the date directory based on the scraper. Exported files will now be stored in the subreddits, redditors, or comments directories. These directories are only created if the scraper is ran. For example, the redditors directory will not be created if you never run the Redditor scraper. Removed the first character used in exported filenames to distinguish scrape type in previous iterations of URS. This is no longer necessary due to the new sub-directory creation. The forbidden access message that may appear when running the Redditor scraper was originally red. Changed the color from red to yellow to avoid confusion. Fixed a filenaming bug that would omit the scrape type if the filename length is greater than 50 characters. Updated README Updated demo GIFs Added new directory structure visual generated by the tree command. Created new section headers to improve navigation. Minor code reformatting/refactoring. Updated STYLE_GUIDE to reflect new changes and made a minor change to the PRAW API walkthrough. [hide][Hidden Content]]

Advanced XSS Detection Suite XSStrike is a Cross Site Scripting detection suite equipped with four hand written parsers, an intelligent payload generator, a powerful fuzzing engine and an incredibly fast crawler. Instead of injecting payloads and checking it works like all the other tools do, XSStrike analyses the response with multiple parsers and then crafts payloads that are guaranteed to work by context analysis integrated with a fuzzing engine. Here are some examples of the payloads generated by XSStrike: >}]};(confirm)()//\ <A%0aONMouseOvER%0d=%0d[8].find(confirm)>z </tiTlE/><a%0donpOintErentER%0d=%0d(prompt)``>z </SCRiPT/><DETAILs/+/onpoINTERenTEr%0a=%0aa=prompt,a()// Apart from that, XSStrike has crawling, fuzzing, parameter discovery, WAF detection capabilities as well. It also scans for DOM XSS vulnerabilities. Main Features Reflected and DOM XSS scanning Multi-threaded crawling Context analysis Configurable core WAF detection & evasion Browser engine integration for zero false positive rate Intelligent payload generator Handmade HTML & JavaScript parser Powerful fuzzing engine Blind XSS support Highly researched work-flow Complete HTTP support Bruteforce payloads from a file Powered by Photon, Zetanize and Arjun Payload Encoding [HIDE][Hidden Content]]