-
Notifications
You must be signed in to change notification settings - Fork 0
/
index.php
192 lines (180 loc) · 10.8 KB
/
index.php
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
<?php
/**
* index file
*
* @author mario
* @package Encoder
* @license http://www.gnu.org/licenses/lgpl.html LGPL
* @changelog See CHANGELOG
*/
# include needed files
require 'XML/Feed/Parser.php';
require 'assets/php/_me/Feed.php';
require 'assets/php/_me/Request.php';
# fetch the vectors from the xssDB
$Feed = new Encoder_Feed;
$FeedURL = (eregi($_SERVER["HTTP_HOST"],"localhost"))?'assets/misc/xssdb.rss':'http://xssdb.dabbledb.com/publish/attackdb/dc23ad51-25ef-4fdc-92be-4a7cb606387e/xssdb.rss';
$Feed->setFeedUrl(
$FeedURL
);
$options = $Feed->createHTMLOptions();
# handle incoming requests
$Request = new Encoder_Request;
$Request->handleRequest();
$Request->response['inputenc'];
$Request->response['inputtext'];
$Request->response['outputenc'];
$Request->response['outputtext'];
$encoding_list =mb_list_encodings();
array_push($encoding_list,'PUNYCODE');
//FIXED: JS Base64 Buggy Issue in Send2HackVertor using Server-side
if (isset($_GET['sendtohackvertor']) && strlen($_GET) > 0)
{
$sendtohackvertor = $_GET['sendtohackvertor'];
/*echo $sendtohackvertor;
echo "\n\n";
echo base64_encode($sendtohackvertor);
exit;*/
$hackvertorurl = 'http://www.businessinfo.co.uk/labs/hackvertor/hackvertor.php?input='.base64_encode($sendtohackvertor);
header("Location: $hackvertorurl");
exit;
}
#generate the HTML
?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" xml:lang="en" lang="en">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />
<title>PHP Charset Encoder</title>
<link rel="Stylesheet" type="text/css" href="assets/css/style.css" />
<script type="text/javascript" src="assets/js/deanedwards/my.js"></script>
<meta name="keywords" content="packer,javascript,compressor,obfuscator" />
<script src="assets/js/deanedwards/base2-load.js" type="text/javascript"></script>
<script src="assets/js/deanedwards/Packer.js" type="text/javascript"></script>
<script src="assets/js/deanedwards/Words.js" type="text/javascript"></script>
<script type="text/javascript" src="assets/js/_me/encode.js"></script>
</head>
<body>
<div>
<h1><span class="red">PHP</span><span class="small">Charset Encoder</span></h1>
</div>
<div id="info">
This tool helps you encoding arbitrary texts to and from <span class="underline"> <?=count($encoding_list)?> kinds</span> of charsets. Also some encoding functions featured by
JavaScript are provided. Feel free to give <a href="mailto:mario.heiderich@gmail.com">feedback</a> if you are missing something or if you found a bug.
</div>
<div>
<form method="post" action="index.php">
<fieldset>
<label for="input-encoding">input encoding</label>
<select name="input-encoding" id="input-encoding">
<?
$selected_input = $Request->response['inputenc'];
for($i=0;$i<=count($encoding_list)-1;$i++)
{
$is_input_selected = '';
if ($Request->response['inputenc']==$encoding_list[$i])
{
$is_input_selected=' selected="selected"';
}
echo '<option value="'.$encoding_list[$i].'"'. $is_input_selected.'>'.$encoding_list[$i].'</option>'."\n";
}
?>
</select>
<label for="output-encoding">output encoding</label>
<select name="output-encoding" id="output-encoding">
<?php
for($i=0;$i<=count($encoding_list)-1;$i++)
{
$is_output_selected = '';
if ($encoding_list[$i]==$Request->response['outputenc'])
{
$is_output_selected=' selected="selected"';
}
echo '<option value="'.$encoding_list[$i].'"'. $is_output_selected.'>'.$encoding_list[$i].'</option>';
}
?>
</select> <span>[<a href="#" title="Find it in Wiki" onclick="window.open('http://en.wikipedia.org/wiki/Special:Search?search='+document.getElementById('output-encoding').options[document.getElementById('output-encoding').selectedIndex].value+ ' Encoding')">charset info</a>]</span>
</fieldset>
<fieldset>
<button type="button" id="input-to-charcode" onclick="Encoder.toCharCode('input');">toCharCode()</button>
<button type="button" id="input-to-urlencode" onclick="Encoder.escape('input');">escape()</button>
<button type="button" id="input-from-charcode" onclick="Encoder.fromCharCode('input');">fromCharCode()</button>
<button type="button" id="input-from-urlencode" onclick="Encoder.unescape('input');">unescape()</button>
<select id="encdec" onblur="setTimeout('document.getElementById(\'encdec\').selectedIndex=0',7000)">
<option>--Encoder/Decoder--</option>
<optgroup label="Encode">
<option onclick="Encoder.toDecEnt('input');">to decimal entities</option>
<option onclick="Encoder.toHexEnt('input');">to HEX entities</option>
<option onclick="Encoder.toUnicode('input');">to Unicode(%u00)</option>
<option onclick="Encoder.toSQLHex('input');">to SQL HEX()</option>
<option onclick="Encoder.toSQLChar('input');">to SQL Char()</option>
<option onclick="Encoder.toOctEnt('input');">to octal JS entities</option>
<option onclick="Encoder.toBase64('input');">to Base64</option>
<option onclick="Encoder.toBase62('input');">to Base62</option>
<option onclick="Encoder.toUrlEncode('input');">to URI component encode</option>
</optgroup>
<optgroup label="Decode">
<option onclick="Encoder.fromDecEnt('input');">from decimal entities</option>
<option onclick="Encoder.fromHexEnt('input');">from HEX entities</option>
<option onclick="Encoder.fromUnicode('input');">from Unicode(%u00)</option>
<option onclick="Encoder.fromSQLHex('input');">from SQL HEX()</option>
<option onclick="Encoder.fromSQLChar('input');">from SQL Char()</option>
<option onclick="Encoder.fromOctEnt('input');">from octal JS entities</option>
<option onclick="Encoder.fromBase64('input');">from Base64</option>
<option onclick="Encoder.fromBase62('input');">from Base62</option>
<option onclick="Encoder.fromUrlEncode('input');">from URI component encode</option>
</optgroup>
<optgroup label="Convert">
<option onclick="Encoder.fromBsToEnt('input');">from \NN to &#NN;</option>
<option onclick="Encoder.fromEntToBs('input');">from &#NN; to \NN</option>
<option onclick="Encoder.fromPercent2Slash('input');">from % to \</option>
<option onclick="Encoder.fromLftoCrlf('input');">from %0A to %0D%0A</option>
</optgroup>
</select>
<select id="misc" onblur="setTimeout('document.getElementById(\'misc\').selectedIndex=0',7000)">
<option>------- MISC -------</option>
<option onclick="Encoder.Reverse('input');">Reverse</option>
<option onclick="Encoder.IncrementChar('input');">Char++</option>
<option onclick="Encoder.DecrementChar('input');">Char--</option>
<option onclick="Encoder.Minify('input');">Minify</option>
<option onclick="Encoder.CalcLength('input');">ContentLength</option><option onclick="Encoder.SaveCookie('input');">Save to Cookie</option>
<option onclick="Encoder.RestoreCookie('input');">Get from Cookie</option>
<option onclick="alert('Cookie Data:\n'+document.cookie+'\n\n\nSize(max 16KB):\n'+document.cookie.length/1000+' KB')">View All Cookies</option>
</select>
<select id="vectors" onchange="Encoder.fromVectorSource(this, 'input')">
<option value="">---XSS Payloads---</option>
<?php echo $options; ?>
</select>
<br />
<textarea name="input-text" id="input-text" cols="75" rows="6"><?php echo htmlspecialchars(stripslashes($Request->response['outputtext'])); ?><?php echo htmlspecialchars(stripslashes(preg_replace('/(^\s*)|(\s*$)/im', null, isset($_GET['hv'])?$_GET['hv']:''))); ?></textarea>
</fieldset>
<fieldset>
<input id="submit" type="submit" value="Convert me!" title="Convert from Selected Input encoding to Output encoding (alt+c)" accesskey="c" />
<input id="h4kvertor" type="button" onclick="Encoder.Send2HV('input');" value="Send to HackVertor API" title="Send to HackVertor API (alt+s)" accesskey="s" />
<input id="repeat" type="submit" value="Repeat" /><input type="text" name="times" id="times" />times
<input id="reset" type="reset" value="Clear All" />
</fieldset>
</form>
</div>
<div id="footer">© <a href="http://mario.heideri.ch/">.mario</a> <?php echo date('Y') ?> - <a href="http://validator.w3.org/check?uri=http%3A%2F%2Fh4k.in%2Fencoding%2F">XHTML 1.0 Strict</a><br />Special thanks to <a href="http://yehg.org">d0ubl3_h3lix</a> for further improvements<br/>Last updated: 2008/12/15</div>
<div id="selfpromotion">
<h3>Other cool stuff:</h3>
<ul>
<li><a href="http://h4k.in/characters">PHP Unicode Generator</a></li>
<li><a href="http://demo.php-ids.org/">PHPIDS Smoketest</a></li>
<li><a href="http://h4k.in/dataurl">data: URL testcases</a></li>
</ul>
</div>
<script type="text/javascript">document.getElementById('input-text').focus();</script>
<script type="text/javascript">
var gaJsHost = (("https:" == document.location.protocol) ? "https://ssl." : "http://www.");
document.write(unescape("%3Cscript src='" + gaJsHost + "google-analytics.com/ga.js' type='text/javascript'%3E%3C/script%3E"));
</script>
<script type="text/javascript">
var pageTracker = _gat._getTracker("UA-82607-10");
pageTracker._trackPageview();
</script>
</body>
</html>