Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Win 10 execution of xsstrike to add headers will report an error #181

Open
cwence opened this issue Jan 3, 2019 · 9 comments
Open

Win 10 execution of xsstrike to add headers will report an error #181

cwence opened this issue Jan 3, 2019 · 9 comments

Comments

@cwence
Copy link

cwence commented Jan 3, 2019

Describe the bug
Hi , Guys
Executing xsstrike to add headers under Win 10 will result in an error, but execution under OS will be normal ?Please ...

Screenshots
image

Potential cause or fix
Do you know what could be causing the problem or how to fix it?

Environment:

  • OS: [Window 10 2018.2]
  • Browser [e.g. Chrome 70.0.3538.102]
  • Python version [e.g. 3.7]
@s0md3v
Copy link
Owner

s0md3v commented Jan 3, 2019

Try escaping = with \ e.g. zmname\=none

@cwence
Copy link
Author

cwence commented Jan 4, 2019

@s0md3v :
Thank you ! But I tried your method, the mistake still exists..... Please try to execute the following command in win10, check the execution results, you will see there is a compatibility problem in the window system

python3 xsstrike.py -u "https://www.baidu.com" --data '{"userId":"Pw2bY","pageSize":9999,"pageNum":1}' --headers 'Cookie: zmname=none' --params --blind --fuzzer

ERROR:
xsstrike.py: error: unrecognized arguments: zmname=none'

@s0md3v
Copy link
Owner

s0md3v commented Jan 4, 2019

You didn't escape the =

@cwence
Copy link
Author

cwence commented Jan 7, 2019

Under the window there are bugs ..
python3 xsstrike.py -u "https://www.baidu.com" --data '{"userId":"Pw2bY","pageSize":9999,"pageNum":1}' --headers 'Cookie: zmname' --params --blind --fuzzer

ERROR:
xsstrike.py: error: unrecognized arguments: zmname'

@s0md3v
Copy link
Owner

s0md3v commented Jan 7, 2019

Try using double quotes maybe.

@s0md3v
Copy link
Owner

s0md3v commented Jan 7, 2019

One more thing, are you sure you are using the latest version of XSStrike?
Ability to add headers from command line has been added recently.

@cwence
Copy link
Author

cwence commented Jan 8, 2019

Using double quotes is fail ! dict is fail ! The XSStrike version is 3.1.2
image

The feeling So ...... Please sample the correct usage on win10 system

@nikeshBastola
Copy link

how to install xsstrike in windows?

@0xInfection
Copy link

@cwence for a tip, you should use msys2 on Windows. Its a bash terminal, so Linux based scripts won't have problem running there.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

4 participants