Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

我发现了一个bug #1

Open
tower111 opened this issue Apr 18, 2020 · 3 comments
Open

我发现了一个bug #1

tower111 opened this issue Apr 18, 2020 · 3 comments

Comments

@tower111
Copy link

first = x.split(" ", 1)[0]

你好,

`POST /cgi-bin/wan.cgi HTTP/1.1
Host: 192.168.8.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:75.0) Gecko/20100101 Firefox/75.0
Accept: text/plain, /; q=0.01
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Referer: http://192.168.8.1/wan.html
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 138
Origin: http://192.168.8.1
Connection: close

{"task_id":"3.2","proto":"3","ipaddr":"192.168.8.2","netmask":"255.255.255.0","gateway":"192.168.8.254","dns1":"2.2.2.2","dns2":"2.2.2.3"}当我尝试用上面这个包fuzz的时候出现了错误。\Boo-Gen>python boo-gen.py test.txt --post -f fuzz.py
Traceback (most recent call last):
File "boo-gen.py", line 159, in
post()
File "boo-gen.py", line 83, in post
second = x.split("=")[1]
IndexError: list index out of range`
应该事json串处理的问题,希望您能够解决,感谢

@santhoshn16
Copy link

A new line character is seen at the end of test.txt while I have tried printing it. To successfully run the code just change list2 = contents.split("\n")[-1] to list2 = contents.split("\n")[-2]

@zhjygit
Copy link

zhjygit commented Dec 7, 2022

A new line character is seen at the end of test.txt while I have tried printing it. To successfully run the code just change list2 = contents.split("\n")[-1] to list2 = contents.split("\n")[-2]

no use

@zhjygit
Copy link

zhjygit commented Dec 7, 2022

image
另外,在执行时一般都会报错,错误地转义无法执行,主要是符号",转换后变成了s_string(" "xxx" "),正确的应该是s_string(" 'xxx' ")。需要手动修改,但代码如何优化呢?

使用了boofuzz(一个burpsuite插件),也会出现这种问题。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants