laluka / bypass-url-parser Goto Github PK

View Code? Open in Web Editor NEW

952.0 952.0 103.0 304 KB

bypass-url-parser

Home Page: https://linktr.ee/TheLaluka

License: GNU Affero General Public License v3.0

Python 99.44% Dockerfile 0.56%

bypass differential exploit hacking offensive parser pentest security semicolon tool tooling url

bypass-url-parser's People

Contributors

Stargazers

Watchers

Forkers

bbhunter 5l1v3r1 alex123-2star nocomp madusec jeffreyshran kareypyer scriptkkiddie mswell gprime31 attacker-codeninja raystyle rockcena st0rm-85 lamscun syzik iamghostride akunwin lalkaltest 0xsojalsec polling-repo-continua jakuta-tech code-r5 ntl-afzaalarif rehanmumtaz123 rariox crazyn1nja angeloobeta j0hn8uff3r midhun340 wand3rlust danzee1 pyro0ownz willardjansen araselmir cybersealops navx-x pandede dutchcyberguy wll0xp tehseensagar bbhunty srinathaetukuri xiaowei6688 yosef0x01 pascal-2013 massmoussi nonnyjay cyberfury101 parkjunmin oxfemale shizonic nanaao ipc-security mohamedtaoufik jumping piyushimself mmilleror juliocesarfort xmardus tk-t0n0y test0z lxh1401 evcuq4hggjd74lhz kayusme illusionist3886 hyperbeats hxlxmjxbbxs reket99 chanpu9 developercyrus tommalvoriddle cybersecuz thepwn1sher icodein adityakat7 t3st3r429 cloudddos gwill-b blackhatethicalhacking anhdungdoan nxg-7 revantkumargupta snowden-aq isaachjk dalaho-bangin mwb0350 c1x1x00xxpentium mahmud0x civil-rakesh reewardius naitsirhc41 slicingmelon nishantbhagat57 tim10f8 luksecurity filthyshoe jaikumar3 gabdug zabuqasem

bypass-url-parser's Issues

a small bug on mac

I found a small bug on mac
code
～～～
#your code on mac
echo -e "\e[34m----------------------\e[0m"

#my code on mac
echo "\033[30m black color \033[0m"

～～～

run

Your color code is not implemented and printed directly on the mac
Thank you for your software, thank you for your efforts

Add new payload/technique `,.js`

Hi there,

I recently found a bypass that BUP didn't find:

I had a /index.php that redirected to https://othersite.com/auth

I noticed that all the .js files returned a 200 OK

Using /index.php/,.js I was able to bypass the restrictions and access the app.

The extensions that also worked:

.js
.css
.gif
.jpe?g
.png
.class
.docx
.xls

Can you add this technique to BUP please ? :)

Cheers,

[Bug] Greedy regex matches garbage instead of full title on edge-cases

Hello,

By default, BUP tries to find the title of the web page using the following regex (line 1236 on my version):

REGEX_TITLE = re.compile(r"<title>(.*)</title>", re.IGNORECASE)

The problem is the greedy (.*) part which could match several HTML "title" tags, and pollute the output logs (I often ran in this case, but can't share the targets here).

To fix this you could simply use an operator to make the regex "lazy":

REGEX_TITLE = re.compile(r"<title>(.*?)</title>", re.IGNORECASE)

Thus, the match will stop at the first "</title>" tag. Of course, you'll have to make sure that the "search" (line 1532 on my version) doesn't return a list if there are multiple "title" tags in the page.

Example of problematic data:

<html><title>sample_page</title><body><title>sample_page_indeed</title></body></html>

laluka / bypass-url-parser Goto Github PK

bypass-url-parser's People

Contributors

Stargazers

Watchers

Forkers

bypass-url-parser's Issues

a small bug on mac

Add new payload/technique `,.js`

[Bug] Greedy regex matches garbage instead of full title on edge-cases

.

Recommend Projects

React

Vue.js

Typescript

TensorFlow

Django

Laravel

D3

Recommend Topics

javascript

web

server

Machine learning

Visualization

Game

Recommend Org

Facebook

Microsoft

Google

Alibaba

D3

Tencent