fixes an issue with unicode errors from XSS payloads (issue #124)

This commit is contained in:
ekultek 2017-10-23 14:11:03 -05:00
parent 242219ac8f
commit a06371aa72
3 changed files with 3 additions and 5 deletions

View file

@ -8,7 +8,7 @@ e6c13a69a5290cdb1a8e5e1c4dd19b7d ./requirements.txt
8f686b05c5c5dfc02f0fcaa7ebc8677c ./etc/auths/whois_auth
82cc68f46539d0255f7ce14cd86cd49b ./etc/link_ext.txt
75b485c7a5c6daa22a65794da4109ddc ./etc/dorks.txt
8fc2e244d69f0a38c2d7cee8da211cbf ./etc/xss_payloads.txt
24783774ac3282a3169e35a4ac713b40 ./etc/xss_payloads.txt
d41d8cd98f00b204e9800998ecf8427e ./bin/__init__.py
a19ac607db04a68fdbfc81d6c5a000d1 ./bin/unzip_gecko.py
dc1eb4ebe0f372af48b5a9c107ebc68d ./bin/drivers/geckodriver-v0.18.0-linux32.tar.gz
@ -43,7 +43,7 @@ d41d8cd98f00b204e9800998ecf8427e ./lib/attacks/whois_lookup/__init__.py
c5ebb0c56c9ae3b9a72a14e3f05afa16 ./lib/attacks/intel_me/__init__.py
1faa2b5dfad6eb538bbfe42942d2a9da ./lib/core/errors.py
d41d8cd98f00b204e9800998ecf8427e ./lib/core/__init__.py
8bf3111d028840e16f77ca833cdd1fb4 ./lib/core/settings.py
66c2efb9247c1164c8ba4869e3606d4a ./lib/core/settings.py
d41d8cd98f00b204e9800998ecf8427e ./var/google_search/__init__.py
b8761604c5d4f88ae653526057491a5f ./var/google_search/search.py
d41d8cd98f00b204e9800998ecf8427e ./var/__init__.py

View file

@ -123,7 +123,6 @@ LOL<style>*{/*all*/color/*all*/:/*all*/red/*all*/;/[0]*IE,Safari*[0]/color:green
&lt;IMG SRC='vbscript&#058;msgbox(\"XSS\")'&gt;
&lt;IMG SRC=\"mocha&#58;&#91;code&#93;\"&gt;
&lt;IMG SRC=\"livescript&#058;&#91;code&#93;\"&gt;
žscriptualert(EXSSE)ž/scriptu
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=javascript&#058;alert('XSS');\"&gt;
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0;url=data&#58;text/html;base64,PHNjcmlwdD5hbGVydCgnWFNTJyk8L3NjcmlwdD4K\"&gt;
&lt;META HTTP-EQUIV=\"refresh\" CONTENT=\"0; URL=http&#58;//;URL=javascript&#058;alert('XSS');\"
@ -239,7 +238,6 @@ perl -e 'print \"&lt;IMG SRC=java\0script&#058;alert(\\"XSS\\")&gt;\";' &gt; out
<SCRIPT>a=/XSS/alert(a.source)</SCRIPT>
\";alert('XSS');//
</TITLE><SCRIPT>alert("XSS");</SCRIPT>
¼script¾alert(¢XSS¢)¼/script¾
<META HTTP-EQUIV="refresh" CONTENT="0;url=javascript:alert('XSS');">
<IFRAME SRC="javascript:alert('XSS');"></IFRAME>
<FRAMESET><FRAME SRC="javascript:alert('XSS');"></FRAMESET>

View file

@ -32,7 +32,7 @@ PATCH_ID = str(subprocess.check_output(["git", "rev-parse", "origin/master"]))[:
# clone link
CLONE = "https://github.com/ekultek/zeus-scanner.git"
# current version <major.minor.commit.patch ID>
VERSION = "1.0.58".format(PATCH_ID)
VERSION = "1.0.58.{}".format(PATCH_ID)
# colors to output depending on the version
VERSION_TYPE_COLORS = {"dev": 33, "stable": 92, "other": 30}
# version string formatting