{ "info": { "author": "Tom Forbes", "author_email": "tom@tomforb.es", "bugtrack_url": null, "classifiers": [ "License :: OSI Approved :: MIT License", "Programming Language :: Python :: 3", "Programming Language :: Python :: 3.5", "Programming Language :: Python :: 3.6" ], "description": "# XCat\n\n![](https://travis-ci.com/orf/xcat.svg?branch=master)\n![](https://img.shields.io/pypi/v/xcat.svg)\n![](https://img.shields.io/pypi/l/xcat.svg)\n![](https://img.shields.io/pypi/pyversions/xcat.svg)\n\nXCat is a command line tool to exploit and investigate blind XPath injection vulnerabilities.\n\nFor complete read the documentation here: https://xcat.readthedocs.io/en/latest/\n\nIt supports an large number of features:\n\n- Auto-selects injections (run `xcat injections` for a list)\n\n- Detects the version and capabilities of the xpath parser and \n selects the fastest method of retrieval\n\n- Built in out-of-bound HTTP server\n - Automates XXE attacks\n - Can use OOB HTTP requests to drastically speed up retrieval\n\n- Custom request headers and body\n\n- Built in REPL shell, supporting:\n - Reading arbitrary files\n - Reading environment variables\n - Listing directories\n - Uploading/downloading files (soon TM)\n\n- Optimized retrieval\n - Uses binary search over unicode codepoints if available\n - Fallbacks include searching for common characters previously retrieved first\n - Normalizes unicode to reduce the search space\n\n## Install\n\nRun `pip install xcat`\n\n**Requires Python 3.7**. You can easily install this with [pyenv](https://github.com/pyenv/pyenv): \n`pyenv install 3.7.1`\n\n## Example application\n\nThere is a complete demo application you can use to explore the features of XCat. \nSee the README here: https://github.com/orf/xcat_app\n\n\n\n", "description_content_type": "text/markdown", "docs_url": null, "download_url": "", "downloads": { "last_day": -1, "last_month": -1, "last_week": -1 }, "home_page": "https://github.com/orf/xcat", "keywords": "", "license": "MIT", "maintainer": "", "maintainer_email": "", "name": "xcat", "package_url": "https://pypi.org/project/xcat/", "platform": "", "project_url": "https://pypi.org/project/xcat/", "project_urls": { "Homepage": "https://github.com/orf/xcat" }, "release_url": "https://pypi.org/project/xcat/1.0.2/", "requires_dist": [ "xpath-expressions (~=1.0)", "aiohttp (~=3.0)", "aiodns", "cchardet", "colorama", "prompt-toolkit", "click", "appdirs" ], "requires_python": ">=3.7", "summary": "A command line tool to automate the exploitation of blind XPath injection vulnerabilities", "version": "1.0.2" }, "last_serial": 4578012, "releases": { "0.6.1": [ { "comment_text": "", "digests": { "md5": "74e205dd86b7562e1e88abcabe8bc39a", "sha256": "feeb8878a47d6d121fc1171b64e266db8475d747a178cf0e1dc8a848972ec29e" }, "downloads": -1, "filename": "xcat-0.6.1.zip", "has_sig": false, "md5_digest": "74e205dd86b7562e1e88abcabe8bc39a", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 23380, "upload_time": "2014-06-27T13:36:30", "url": "https://files.pythonhosted.org/packages/e2/68/2e137363c8577220ce6ce3b7f4d2e95d75b7e83f9e0c928b06474bdc8bac/xcat-0.6.1.zip" } ], "0.7": [ { "comment_text": "", "digests": { "md5": "f4b0ce53301d05c7cd5b18e07d59f6e1", "sha256": "e3c28f83c34111ff8ab2208e26ed590fbfa3b780d786ae5271c390a318724a05" }, "downloads": -1, "filename": "xcat-0.7.zip", "has_sig": false, "md5_digest": "f4b0ce53301d05c7cd5b18e07d59f6e1", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 25745, "upload_time": "2014-07-17T09:56:56", "url": "https://files.pythonhosted.org/packages/8d/3c/f4beecf7087b05a8690ca89d6a053887ac364192eaa17f368a92691ac342/xcat-0.7.zip" } ], "0.7.1": [ { "comment_text": "", "digests": { "md5": "c3acd9d0488eb5d091b6a8daa434a8eb", "sha256": "7c55be7ef20a91c69715ec64ce288ac9c893c2a3107e86dd405fdeaa690f6dca" }, "downloads": -1, "filename": "xcat-0.7.1.zip", "has_sig": false, "md5_digest": "c3acd9d0488eb5d091b6a8daa434a8eb", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 26945, "upload_time": "2014-08-18T09:26:40", "url": "https://files.pythonhosted.org/packages/b1/1d/c69a76be15e9075baef6915502e8921dd971ea6b659d9bee60744bf75f13/xcat-0.7.1.zip" } ], "0.9": [ { "comment_text": "", "digests": { "md5": "456fca09e044f2e1230f4eb6136147a1", "sha256": "1d6a0b184f4552a70d7734344ae64e1a87530aeebd97a59c6cda1febb2d0c441" }, "downloads": -1, "filename": "xcat-0.9-py3-none-any.whl", "has_sig": false, "md5_digest": "456fca09e044f2e1230f4eb6136147a1", "packagetype": "bdist_wheel", "python_version": "3.6", "requires_python": null, "size": 18573, "upload_time": "2017-07-19T19:14:28", "url": "https://files.pythonhosted.org/packages/58/31/d078abac61c442eb29ab5fdd71bd5b1f53bdf9b6a4f57a986c63eeee4195/xcat-0.9-py3-none-any.whl" }, { "comment_text": "", "digests": { "md5": "1eb7396eb028be239a97a5e18de65e7a", "sha256": "de1982d36f6125c9422983620fed1a421587eb1b3cf01c713471cc182767794c" }, "downloads": -1, "filename": "xcat-0.9.tar.gz", "has_sig": false, "md5_digest": "1eb7396eb028be239a97a5e18de65e7a", "packagetype": "sdist", "python_version": "source", "requires_python": null, "size": 14714, "upload_time": "2017-07-19T19:14:30", "url": "https://files.pythonhosted.org/packages/6b/60/3f8582bdc4b2bec849fdddbe94185b8daab63e10067126bdbd4b484555a6/xcat-0.9.tar.gz" } ], "1.0.0": [ { "comment_text": "", "digests": { "md5": "25578e42041ccc469b1288d7d1932fef", "sha256": "2ca9b42e1f8e171109a2353d06680206507a7f6f89e7b16cf1b8627295d07fb3" }, "downloads": -1, "filename": "xcat-1.0.0-py3-none-any.whl", "has_sig": false, "md5_digest": "25578e42041ccc469b1288d7d1932fef", "packagetype": "bdist_wheel", "python_version": "py3", "requires_python": ">=3.7", "size": 19156, "upload_time": "2018-12-09T15:09:23", "url": "https://files.pythonhosted.org/packages/a6/65/07434a71a2fe155b1966a10577ec0377ad5853fa0d3b84415155c0d5ada3/xcat-1.0.0-py3-none-any.whl" }, { "comment_text": "", "digests": { "md5": "c312f19b23548533f463976201efed59", "sha256": "459695d904daae4dfdcddab2152b4caf564ac3f9e828582c1aeac75956d9ba06" }, "downloads": -1, "filename": "xcat-1.0.0.tar.gz", "has_sig": false, "md5_digest": "c312f19b23548533f463976201efed59", "packagetype": "sdist", "python_version": "source", "requires_python": ">=3.7", "size": 13542, "upload_time": "2018-12-09T15:09:24", "url": "https://files.pythonhosted.org/packages/1c/6e/13a085edfd98091de23cb5f31f23d9162146e2e1e8b419b311686ff023a9/xcat-1.0.0.tar.gz" } ], "1.0.1": [ { "comment_text": "", "digests": { "md5": "701fbe872e076a1c44ad922d4f7f8143", "sha256": "5ecdea927fd2a9308d7702d9805d1a6d2aae5fca02fd4466f1f4a0159adf8b7f" }, "downloads": -1, "filename": "xcat-1.0.1-py3-none-any.whl", "has_sig": false, "md5_digest": "701fbe872e076a1c44ad922d4f7f8143", "packagetype": "bdist_wheel", "python_version": "py3", "requires_python": ">=3.7", "size": 19740, "upload_time": "2018-12-09T15:10:44", "url": "https://files.pythonhosted.org/packages/c8/3b/c1ef2dacb3c6b899de2cc1c30b5080941f1185d953d072d7b26f5914f991/xcat-1.0.1-py3-none-any.whl" }, { "comment_text": "", "digests": { "md5": "8bd3c566568f2ff1020af74e9cbf1d21", "sha256": "a09ab87f72e48c6a38c074079623d6e70b48142d55f5cb62c8940d4e4708304f" }, "downloads": -1, "filename": "xcat-1.0.1.tar.gz", "has_sig": false, "md5_digest": "8bd3c566568f2ff1020af74e9cbf1d21", "packagetype": "sdist", "python_version": "source", "requires_python": ">=3.7", "size": 14225, "upload_time": "2018-12-09T15:10:47", "url": "https://files.pythonhosted.org/packages/4e/5d/c5e505657b7f32083b683a24983422d6889876e7343ef1ecbac58f5b456c/xcat-1.0.1.tar.gz" } ], "1.0.2": [ { "comment_text": "", "digests": { "md5": "e59fa24e5027135d0270ff6c66e06545", "sha256": "8a8cb2d69760e70e22cb7e82ed511ff63fef62b74df36d0b66a3031e8ce5001e" }, "downloads": -1, "filename": "xcat-1.0.2-py3-none-any.whl", "has_sig": false, "md5_digest": "e59fa24e5027135d0270ff6c66e06545", "packagetype": "bdist_wheel", "python_version": "py3", "requires_python": ">=3.7", "size": 19968, "upload_time": "2018-12-09T19:50:27", "url": "https://files.pythonhosted.org/packages/fa/c4/bcd367ea3d21e6ad0fa7ea1f980ae45ae8c6b88b58c122ada76526048012/xcat-1.0.2-py3-none-any.whl" }, { "comment_text": "", "digests": { "md5": "951a9e905ec987b898f3328ff4ae7309", "sha256": "e1ddc72c628ce2c3d15523f399be6e9e779faeee1e3a59dad0f9a7cf89fa8bf4" }, "downloads": -1, "filename": "xcat-1.0.2.tar.gz", "has_sig": false, "md5_digest": "951a9e905ec987b898f3328ff4ae7309", "packagetype": "sdist", "python_version": "source", "requires_python": ">=3.7", "size": 14419, "upload_time": "2018-12-09T19:50:29", "url": "https://files.pythonhosted.org/packages/9a/b7/6e2a3b63e73152b392c6645eb748a2cf79e17fedf4ae4db6ff53b6dc9441/xcat-1.0.2.tar.gz" } ] }, "urls": [ { "comment_text": "", "digests": { "md5": "e59fa24e5027135d0270ff6c66e06545", "sha256": "8a8cb2d69760e70e22cb7e82ed511ff63fef62b74df36d0b66a3031e8ce5001e" }, "downloads": -1, "filename": "xcat-1.0.2-py3-none-any.whl", "has_sig": false, "md5_digest": "e59fa24e5027135d0270ff6c66e06545", "packagetype": "bdist_wheel", "python_version": "py3", "requires_python": ">=3.7", "size": 19968, "upload_time": "2018-12-09T19:50:27", "url": "https://files.pythonhosted.org/packages/fa/c4/bcd367ea3d21e6ad0fa7ea1f980ae45ae8c6b88b58c122ada76526048012/xcat-1.0.2-py3-none-any.whl" }, { "comment_text": "", "digests": { "md5": "951a9e905ec987b898f3328ff4ae7309", "sha256": "e1ddc72c628ce2c3d15523f399be6e9e779faeee1e3a59dad0f9a7cf89fa8bf4" }, "downloads": -1, "filename": "xcat-1.0.2.tar.gz", "has_sig": false, "md5_digest": "951a9e905ec987b898f3328ff4ae7309", "packagetype": "sdist", "python_version": "source", "requires_python": ">=3.7", "size": 14419, "upload_time": "2018-12-09T19:50:29", "url": "https://files.pythonhosted.org/packages/9a/b7/6e2a3b63e73152b392c6645eb748a2cf79e17fedf4ae4db6ff53b6dc9441/xcat-1.0.2.tar.gz" } ] }