Python xss加密脚本
发布:独自等待 | 发布时间: 2012年1月20日在网上看了一些,发现拿过来不能使用,于是网上查了一下,改了最后一行 ,就可以使用了。
'''
Python XSS payload encoder
Author: BGS (rstcenter.com)
Contributor cmiN (rstcenter.com)
Date: 13 August 2011
Version: Python 2.7
'''
#!/usr/bin/env python
import time
import sys
import urllib2
import base64
def main():
try:
if sys.argv[1] == "help":
print '[-]'+time.ctime()
print'''[-]Instructions:
encoder.py <encoding type> "<string>"
Available encodings: ascii b64 hex url
[-]Exiting...
'''
elif sys.argv[1] == "b64":
b64_encode()
elif sys.argv[1] == "ascii":
ascii_encode()
elif sys.argv[1] == "hex":
hex_encode()
elif sys.argv[1] == "url":
url_encode()
else:
sys.exit(1)
except Exception, e:
print 'Type "encoder.py help" for instructions! '
sys.exit(1)
def b64_encode():
payload = sys.argv[2]
encoded = base64.standard_b64encode(payload)
print ' ################## B64 String #######################'
print ''
print 'String:' + encoded
print ''
print "#################### >>EOF<< #########################"
def ascii_encode():
payload = sys.argv[2]
string = ''
for w in payload:
string += str(ord(w)) + ","
print ' ################## ASCII String #####################'
print ''
print 'string.fromCharCode(' + string.strip(",") +')'
print ''
print "#################### >>EOF<< #########################"
def hex_encode():
payload = sys.argv[2]
encoded = payload.encode('hex')
print ' ################## HEX String #######################'
print ''
print 'String:' + encoded
print ''
print "#################### >>EOF<< #########################"
def url_encode():
payload = sys.argv[2]
encoded = urllib2.quote(payload.encode("utf8"))
print ' ################## URL String #######################'
print ''
print 'String:' + encoded
print ''
print "#################### >>EOF<< #########################"
if __name__ == '__main__':
main()
- 相关文章:
XSS获取用户明文密码 (2012-1-4 9:51:10)
Exploiting cross-site scripting in Referer header (2011-12-22 16:26:53)
XSS Cheat Sheet (2011-11-14 9:47:1)
UTF-7 XSS 常见利用方法 (2011-11-1 15:32:12)
utf-7 xss paper (2011-10-31 17:0:28)
xss的高级利用,添加管理员 (2011-10-14 15:26:30)
51cto网站存在xss? (2011-9-7 13:43:25)
网站安全修改本地cookie,post,xss等入侵测试firefox利器 (2011-6-14 11:6:45)
发表评论
◎欢迎参与讨论,请在这里发表您的看法、交流您的观点。





