• 指間主站
• 空間域名
• 企業郵局
• 在線商城
• 幫助中心
• 支付方式
• 收藏本站

• 域名注冊
• 網站建設
• 虛擬主機
• 企業郵局
• 智能建站
• 平面設計
• 多媒體制作
• 改版維護
• 網站推廣
• 程序開發
• 電腦維修

• ·聯系電話:+86.023-75585550
• ·聯系傳真:+86.023-75585550
• ·24小時手機:13896886023
• ·QQ 咨 詢：361652718 513960520

用來bypass一些檢測規則或者條件限制

XSS加密還是很常見很常見的。

'''
Python XSS payload encoder
Author: BGS (rstcenter.com)
Contributor cmiN (rstcenter.com)
Date: 13 August 2011
Version: Python 2.7
'''
#!/usr/bin/env python

import time
import sys
import urllib2
import base64

def main():
  
    try:
        if  sys.argv[1] == "help":
            print '[-]'+time.ctime()
            print'''[-]Instructions:
                encoder.py <encoding type> "<string>"
                Available encodings: ascii b64 hex url
[-]Exiting...
             '''
        elif sys.argv[1] == "b64":
            b64_encode()
        elif sys.argv[1] == "ascii":
            ascii_encode()
        elif sys.argv[1] == "hex":
            hex_encode()
        elif sys.argv[1] == "url":
            url_encode()
          
        else:
            sys.exit(1)
    except Exception, e:
        print 'Type "encoder.py help" for instructions! '
        sys.exit(1)
  
  
def b64_encode():
    payload = sys.argv[2]
    encoded = base64.standard_b64encode(payload)
    print ' ################## B64 String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"

  
def ascii_encode():
    payload = sys.argv[2]
    string = ''
  
    for w in payload:
        string += str(ord(w)) + ","
    print ' ################## ASCII String #####################'
    print ''
    print 'string.fromCharCode(' + string.strip(",") +')'
    print ''
    print "#################### >>EOF<< #########################"

def hex_encode():
    payload = sys.argv[2]
    encoded = payload.encode('hex')
    print ' ################## HEX String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"
  
  
  

def url_encode():
    payload = sys.argv[2]
    encoded = urllib2.quote(payload.encode("utf8")) 
    print ' ################## URL String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"

if __name__ == '
References

http://www.lo0.ro/2011/python-xss-payload-encoder/

http://monyer.com/demo/monyerjs/

http://tools88.com/safe/MonyerEn.php