https://github.com/thomashartm/sinkfinder

Electron based application to identify potential vulnerabilities by passing identifiers into user controlled input parameters and evaluating the output in the background. It uses puppeteer for the actual evaluation.
https://github.com/thomashartm/sinkfinder

Last synced: 6 days ago
JSON representation

Electron based application to identify potential vulnerabilities by passing identifiers into user controlled input parameters and evaluating the output in the background. It uses puppeteer for the actual evaluation.

• Host: GitHub
• URL: https://github.com/thomashartm/sinkfinder
• Owner: thomashartm
• License: cc0-1.0
• Created: 2018-12-16T16:06:38.000Z (about 6 years ago)
• Default Branch: master
• Last Pushed: 2022-12-08T08:11:09.000Z (about 2 years ago)
• Last Synced: 2024-11-14T15:06:26.045Z (about 2 months ago)
• Language: JavaScript
• Homepage:
• Size: 424 KB
• Stars: 0
• Watchers: 1
• Forks: 0
• Open Issues: 8
• Metadata Files:
  • Readme: README.md
  • License: LICENSE.md

Awesome Lists containing this project

README

        
# SinkFinder

SinkFinder scans a target URL for user controlled input verctors and 

probes them with a set different payloads to identify

potential sinks. 

It uses puppeteer to communicate with the target and to evaluate 

the identifiers which are reflected into the dom.

**Development**

- `package.json` - Points to the app's main file and lists its details and dependencies.

- `main.js` - Starts the app and creates a browser window to render HTML. This is the app's **main process**.

- `index.html` - A web page to render. This is the app's **renderer process**.

To clone and run this repository you'll need [Git](https://git-scm.com) and [Node.js](https://nodejs.org/en/download/) (which comes with [npm](http://npmjs.com)) installed on your computer. From your command line:

```bash

# Clone this repository

git clone https://github.com/thomashartm/sinkfinder.git

# Go into the repository

cd sinkfinder

# Install dependencies

npm install

# Run the app

npm start

```

## License