diff --git a/arjun.py b/arjun.py index 8ad71d3..8fad69e 100644 --- a/arjun.py +++ b/arjun.py @@ -158,7 +158,7 @@ def initialize(request, wordlist): name = list(param.keys())[0] confirmed_params.append(name) print('%s name: %s, factor: %s' % (res, name, reason)) - return confirmed_params + return found, confirmed_params request = prepare_requests(args) @@ -168,25 +168,27 @@ def initialize(request, wordlist): if type(request) == dict: mem.var['kill'] = False url = request['url'] - these_params = initialize(request, wordlist) + found, these_params = initialize(request, wordlist) if these_params == 'skipped': print('%s Skipped %s due to errors' % (bad, request['url'])) elif these_params: final_result['url'] = url final_result['params'] = these_params final_result['method'] = request['method'] + final_result['heuristics'] = found elif type(request) == list: for each in request: url = each['url'] mem.var['kill'] = False print('%s Scanning: %s' % (run, url)) - these_params = initialize(each, list(wordlist)) + found, these_params = initialize(each, list(wordlist)) if these_params == 'skipped': print('%s Skipped %s due to errors' % (bad, url)) elif these_params: final_result[url] = {} final_result[url]['params'] = these_params final_result[url]['method'] = each['method'] + final_result[url]['heuristics'] = found print('%s Parameters found: %s' % (good, ', '.join(final_result[url]))) except KeyboardInterrupt: exit()