wstone0011 / hackbar Goto Github PK

when paste URLEncoded string (cyrilic) like 
"%D0%BF%D1%80%D0%B8%D0%B2%D0%B5%D1%82%20%D0%BC%D0%B8%D1%80" after decode see 
this "пÑ�ивеÑ� миÑ�", but I have See This "привет 
мир"

There is no unicode support in POST data. 

What steps will reproduce the problem?

1. Have a window with more tabs inside

2. Tear off one tab (click on that tab and drag it downwards)

3. The page inside that tab will be moved to a new window

4. The new window won't have any tab associated to that page!

5. With no tab displayed, it is impossible to drag the page back to the 
original window

What is the expected output? What do you see instead?

after 3. the new window is expected to display a tab beside the new tab button 
(the one with a '+' on), but only the new tab button is displayed

What version of the product are you using? On what operating system?

Firefox 8.0 for Ubuntu - Canonical 1.0 on Kubuntu 11.10
Hackbar 1.6.1

Please provide any additional information below.

The issue only occurs when Hackbar extension is enabled

I have a website that pops up a new window upon login, when Hackbar is enabled 
in Firefox 5 the new window is just blank.

The webpage has a login form, when the user presses the login button a 
javascript opens a new window, creates a new login form in it with 
document.write, fills the values posted in the main window form, and posts it.

When Hackbar is active the new window is created but no content is written in 
it.

My configuration is:
Linux Debian Testing/Sid
Hackbar 1.6.1
Iceweasel 5.0 (Firefox 5.0 rebranded)

If you have problems reproducing the bug I can provide a sample page.

Regards,

Paolo.

Is it possible to port this project to Chrome?

Sending customized packets might be tricky, but it's possible with thirdparty 
IPC calls.

What steps will reproduce the problem?
1. Toggle Hackbar to have it on the bar

What is the expected output? What do you see instead?
Having it in the sidebar

What version of the product are you using? On what operating system?
The last one, Win Xp Pro

Using FF addins :
- Access Me
- All-in-One Sidebar
- CacheViewer
- ColorZilla
- En-têtes HTTP en direct
- Firebug
- Firecookie
- Java Console
- Javas Quick Starter
- Leet Key
- Microsoft .NET Framework Assistant
- Poster
- SQL Inject Me
- Tamper Data
- Web Developer
- XSS Me

What steps will reproduce the problem?
1. Try to install plugin in SeaMonkey


What is the expected output? What do you see instead?
Plugin isnt compatible with SeaMonkey

What version of the product are you using? On what operating system?
HackBar 1.6.2 with SeaMonkey 2.15

Please provide any additional information below.
As SeaMonkey is based on Firefox HackBar should also be compatible with 
SeaMonkey but the install process is hindered on the missing SeaMonkey flag.

Is it possible to add a function in SQL menu that reverts all calls to char(xx) 
by the ascii value ?

Thank you.

What steps will reproduce the problem?
1. Install Firefox 33.
2. Install Hackbar.
3. Attempt to use Hackbar, discover that the browser renders the webpage over 
Hackbar.

What is the expected output? What do you see instead?
Expect to have the full hackbar visible. Instead it is covered up by the 
webpage.

What version of the product are you using? On what operating system?
Hackbar version 1.6.2, Firefox 33.0 on Mac OS X 10.9.5.

Please provide any additional information below.

What steps will reproduce the problem?
1. use the hackbar with Solr and this kind of urls : 
http://...facet.date=date&f.date.facet.date.gap=%2B1DAY
2. note the '+' isn't a URL encoded space (' ') but the '+' character the 
server expects
3. Load/Split URL (note the splitted URL contains the literal '+' character 
(which seems correct)
4. Execute the query (note the literal '+' (not encoded) in the location bar 
which does NOT seem correct)
5. SolR complains (it caught a space instead of a '+')

with the HackBar 1.4.5

What steps will reproduce the problem?
1. use the hackbar with Solr and this kind of urls : 
http://...facet.date=date&f.date.facet.date.gap=%2B1DAY
2. note the '+' isn't a URL encoded space (' ') but the '+' character the 
server expects
3. Load/Split URL (note the splitted URL contains the literal '+' character 
(which seems correct)
4. Execute the query (note the literal '+' (not encoded) in the location bar 
which does NOT seem correct)
5. SolR complains (it caught a space instead of a '+')

with the HackBar 1.4.5

Hackbar will be more useful for web application testing if it supports putting 
non URL strings into the referrer field.

Tested it on Hackbar 1.6.0 on FF 18.0, nothing happens if we put some injection 
parameters and click on Execute.

What steps will reproduce the problem?
1. install FF4 beta 8
2. install addon- compatability reporter
3. install hackbar

What is the expected output?
The addon to not interfere with other addons or the toolbar

What do you see instead?
- the "feedback" addon in FF4 had it's toolbar menu hidden
- toolbar customizations are reset on FF startup

What version of the product are you using? On what operating system?
FF 4 b8 Mac OS X 10.6.6

Fuller testing shows that enabling hackbar causes toolbar items from Adblock 
plus, user agent switcher, feedback, ubiquity, status4evar to be unavailable as 
well.


Please provide any additional information below.
I tested on a fresh profile and this is the only addon causing issues. 

What steps will reproduce the problem?
1. Install latest Firefox alpha version
2. Open Hackbar and load URL
3. Check that new lines are double size than in previous Firefox versions.

What is the expected output? What do you see instead?
New lines are displayed like two CR, instead of one.

What is the expected output? What do you see instead?
Its not working in Google chrome

What version of the product are you using? On what operating system?
Featured product

Please provide any additional information below.
<a href="http://smartphonetool.com">Smartphonetool</a>

What steps will reproduce the problem?
1. Open a new tab
2. open hackbar


What is the expected output? What do you see instead?
Hackbar contains 'about:blank' or 'about:newtab', but it should be empty so 
that I can easily paste a URL into it.

What version of the product are you using? On what operating system?
1.6.1

Please provide any additional information below.
The attached patch fixes this.

The box the URL loads into is giant height-wise (see attached), and for my uses 
a single line for the URL would suffice in most cases, and would give me around 
90px vertically. Ideally I think a toggle on the Hackbar would be the best, if 
you support this.

What steps will reproduce the problem?
1. Install HackBar
2. Open a menu
3. No icons!

What is the expected output? What do you see instead?
See icons as in the Windows version

Please use labels and text to provide additional information.
I'm using Ubuntu 10.4 and Firefox 3.63

will hacbar available to google chrome?

It would be nice if I could modify the header information for requests.

What steps will reproduce the problem?
1.take an url with escaped characters in the parameters such as 
%2a%2fItem%2fMeta%2ftest%253AingestTime
2. load URL into hackbar
3. the escaped chars get unescaped 1 level - producing: 
*/Item/Meta/test%3AingestTime

What is the expected output? What do you see instead?
I would expect to load the url as it is, instead it is escaped once - which can 
affect some webapps


What version of the product are you using? On what operating system?
Hackbar 1.5.5 on Firefox 3.6.12

Please provide any additional information below.

What steps will reproduce the problem?
1. Install hackbar and disable it
2. Create new custom toolbar
3. enable hackbar and restart firefox

What is the expected output? What do you see instead?
My custom toolbar disappear completely. 

What version of the product are you using? On what operating system?
FireFox4, Win7 SP1 Pro x64

Please provide any additional information below.
After disabling hackbar and restart I see custom toolbar again

I cannot test vulnerability of the site.

I believe it would be good to mention somewhere that Hackbar gets actually 
activated with the F9 key. I would recommend to put it to the "About" 
description on the addon page.

What steps will reproduce the problem?
1. Install Hackbar addon
2. Press (Alt) to display the legacy menu
3. Make sure Hackbar is enabled in View/Toolbars/Hackbar
4. Navigate to about:addons
5. Select "More" on Hackbar Addon
6. Go to Addon page https://addons.mozilla.org/en-us/firefox/addon/hackbar/
7. Go to Homepage http://code.google.com/p/hackbar/
8. Panic, because nowhere is written that Hackbar gets activated with F9.

What steps will reproduce the problem?
1. Install Firefox 4 Beta
2. Install Hackbar 1.5.0
3. Open hackbar pressing F9

What is the expected output? What do you see instead?
The textarea should appear below the address field instead of over it.

Sometimes I want to just paste a URL into hackbar but there is already one in 
the textfield. To avoid overwriting the paste buffer, I added a clear URL 
button to hackbar that I can just click to make it empty. Attached is the patch 
for this, it lacks a logo.

What steps will reproduce the problem?
1. Installed Hack bar add on for Mozilla
2. Used F9 key to bring up hack bar.

What is the expected output? What do you see instead?
Hack bar does not come up.

What version of the product are you using? On what operating system?
Mozilla Firefox 10.0.2

Please provide any additional information below.

Hack bar does not appear when tried with F9 key.  Also tried adding shortcut in 
add-on bar for Hack bar.  Hack bar did not show up even when tried from Hack 
bar icon from the add-on bar.

Hi there!

Hackbar is awesome, and makes my job so much easier!

I'm hoping that you can help me with an issue. I noticed that when I click 
"Load URL" after a Paste request, the post date uses the Plus sign anywhere 
where there was a space. However, when I send the request the Plus sign is sent 
as %2b, and not + or %20 as originally intended. Did I accidentally enable an 
option for this somewhere, or is it a bug?

1. Right now, if you go to a sight with http://example.org/000/foo.html, I have 
to highlight "000" and hit + to go to the next one; I shouldn't have to 
highlight it since it's the only #...

2. For http://example.org/000/foo.html, if I highlight "000" and hit +, it will 
change to "1", but I would expect it to change to "001".

3. For http://example.org/009/foo.html, if I highlight "009" and hit +, it will 
change to "1", but I would expect it to change to "010".

Thank you, I love the Hackbar! You should name it General Hackbar :)

not available for firefox 5