Comments (2)
请问你的是伪静态吗?如果遇到空跑很多境况都是没有指定参数,指定参数用 *
from xssfork.
不是伪静态,就是简单的php demo适用工具。python2.7.12,做了多种尝试,换了几个版本的ubuntu还是有上述payloads空跑问题,看exceptionlog主要是两处,因为阅读代码能力比较烂,不知道改哪些地方。改用windows,替换部分代码比如os.pgkill,使用同样的命令可以成功跑起来,通过日志、截图和User-Agent,作者应该使用的是mac,难道和ubuntu环境有差异,ds买不起mac怎么办。成功跑起来后,确实是一款不错的工具,star for you。
附上ubuntu exceptionlog,老大有兴趣可以看看啥原因。
Traceback (most recent call last):
File "/home/test/xssfork-master/common/utils.py", line 40, in start_with
if string.strip().index(substring) == 0:
ValueError: substring not found
Traceback (most recent call last):
File "/home/test/xssfork-master/common/../taskschedule/task_thread.py", line 176, in run
self.check_xss(payload)
File "/home/test/xssfork-master/common/../taskschedule/task_thread.py", line 142, in check_xss
child_process, payload = self.sub_process_open(payload)
File "/home/test/xssfork-master/common/../taskschedule/task_thread.py", line 122, in sub_process_open
request_command, url_payload, destination_command = self.get_cmd(payload)
File "/home/test/xssfork-master/common/../taskschedule/task_thread.py", line 100, in get_cmd
url_payload = self.replace_url_to_payload(payload)
File "/home/test/xssfork-master/common/../taskschedule/task_thread.py", line 89, in replace_url_to_payload
url_payload = re.subn(r'bsmali4_(?:int|mix|other|str|float)', payload, url_payload)[0]
File "/usr/lib/python2.7/re.py", line 166, in subn
return _compile(pattern, flags).subn(repl, string, count)
File "/usr/lib/python2.7/re.py", line 286, in _subx
template = _compile_repl(template, pattern)
File "/usr/lib/python2.7/re.py", line 266, in _compile_repl
p = _cache_repl.get(key)
TypeError: unhashable type: 'dict'
from xssfork.
Related Issues (20)
- TypeError: unhashable type: 'dict' HOT 1
- 似乎存储型xss检测效果不好 HOT 3
- dvwa的get、post方式的xss都无法检测出来 HOT 3
- 是否考虑支持csrf_token参数 HOT 1
- 没有检测出XSS,反射型 HOT 1
- requestment.txt -> requirements.txt HOT 3
- ImportError: No module named colorlog HOT 1
- 关于请求方法和payload问题 HOT 4
- [ERROR] there is no params, please check your input
- Windows无法使用吗 HOT 3
- centos启动报错 HOT 1
- mac下路径问题 HOT 2
- 普通的xss扫不出来。。 HOT 1
- 检测注入的那个Burp插件还有吗? HOT 1
- windows与linux环境下行分隔符不一致导致的错误
- SQL注入漏洞
- cannot import name 'XSS_FORK_PATH' HOT 7
- 大哥你的这个检测貌似不行 HOT 11
- Kali,python 2.7环境启动报错 HOT 3
- 是否考虑支持多线程? HOT 3
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from xssfork.