nimble install xpath

git clone https://github.com/blue0x1/xpath.git
cd xpath
make linux
make test

dist/xpath-linux-amd64

sudo make install

/usr/local/bin/xpath

sudo make install PREFIX=/usr

make deb
sudo dpkg -i dist/xpath_1.0.0_amd64.deb

make windows

dist/xpath-windows-amd64.exe

sudo apt install mingw-w64

xpath -u "http://target.local/search?q=test" -p q

xpath -u "http://target.local/search?q=test&id=1"

xpath -u "http://target.local/login" -m POST -d "user=*&pass=test"

xpath -u "http://target.local/search?q=test" -p q -t A -x

xpath -u "http://target.local/search?q=test" -p q --proxy http://127.0.0.1:8080

xpath -u "http://target.local/search?q=test" -p q -t A -o report.json -f json

USAGE
  xpath [OPTIONS] -u <URL>

TARGET
  -u, --url <URL>           Target URL
  -m, --method <METHOD>     HTTP method: GET or POST
  -d, --data <DATA>         POST body, use * to mark injection point
  -p, --param <PARAM>       Parameter(s) to test, comma-separated
  -c, --cookie <COOKIE>     Cookie string
  -H, --header <HEADER>     Extra header, repeatable

DETECTION
  -t, --technique <FLAGS>   E, B, T, U, P, or A
  -l, --level <1-5>         Payload thoroughness level
  -x, --extract             Extract data after confirming injection
      --xpath <EXPR>        XPath expression for extraction

OUTPUT
  -o, --output <FILE>       Save report
  -f, --format <FMT>        text or json
  -v, --verbose             Verbose output

xpath -u "http://target.local/item?id=1" -p id -t E

xpath -u "http://target.local/search?q=test" -p q -t B

xpath -u "http://target.local/search?q=test" -p q -t T --time-sec 3

xpath -u "http://target.local/search?q=INVALID&field=name" -p field -t U -x

xpath -u "http://target.local/login" -m POST -d "username=*&password=test" -t P

xpath -u "http://target.local/query?q=test" -p q -t A -x

xpath -u "http://target.local/query?q=test" -p q -x --xpath "name(/*[1])"

src/
  xpath.nim
  core/
    analyzer.nim
    crawler.nim
    extractor.nim
    http.nim
    payloads.nim
    reporter.nim
    scanner.nim
  utils/
    cli.nim
    config.nim
    logger.nim