Comments (16)
from x8.
Hi, thanks for the issue. Can you provide the word that causes this error and the version(main or from crates.io) of the tool?
from x8.
Latest version of the tool main version installed with "cargo install x8" cargo version = cargo 1.70.0 (ec8a8a0ca 2023-04-25). The word I am not sure but it gives that error also with Wordlists provided by you in the readme. Started to think is a cargo release problem.
Thanks
from x8.
Error keep going with --header flag and without it.
from x8.
Gzip main version go well on parameters but stop on --headers flag without error.
from x8.
Thanks, I'll check it in my free time and return to this issue. For now, you can manually remove the words with special characters from the wordlist. I think they're the main reason of the error.
from x8.
Perfect. Thank you again
from x8.
Gzip main version go well on parameters but stop on --headers flag without error.
It's fine. Sometimes a server may refuse to send an answer or send it after a delay in case some special or invalid headers are sent. You can try to decrease the value of --timeout
if it bothers you.
from x8.
Hi
I also encounter this error when I use the following wordlist. I tried to remove some characters from the wordlist, but I didn't get any result
wordlsit:
https://wordlists-cdn.assetnote.io/data/automated/httparchive_parameters_top_1m_2023_05_28.txt
Error:
thread 'main' panicked at 'called `Result::unwrap()` on an `Err` value: http::Error(InvalidUri(InvalidUriChar))', /root/.cargo/registry/src/github.com-1ecc6299db9ec823/x8-4.3.0/src/network/request.rs:325:58 note: run with `RUST_BACKTRACE=1` environment variable to display a backtrace
commad:
x8 -u <domain.tld> -w <wordlist> -c 1 -m 20
from x8.
Hi again
I used this command to fix the problem.
The problem is solved now, but I think this method makes me miss some words
cat <WORDLIST> | jq -Rr @uri | tee <NEW_WORDLIST>
from x8.
^^ confirmed worked for me as well.
from x8.
from x8.
Hi again
I used this command to fix the problem. The problem is solved now, but I think this method makes me miss some words
cat <WORDLIST> | jq -Rr @uri | tee <NEW_WORDLIST>
Hiiii Again :)
I recently found out that x8 itself has a flag to solve this problem
flag:--encode
final command: x8 -u <domain.tld> -w <wordlist> -c 1 -m 20 --encode
from x8.
from x8.
Hi @sp1nn4k3r and @mAminP. Please, don't try to use the --encode
flag to solve the issue. It encodes the whole query and therefore the server won't recognize the parameters. I'll try to fix the issue this week and return with an update
from x8.
The new version of the tool from crates.io (that gets installed with cargo install
) now urlencodes parameters' keys and ignores invalid headers that solves the issue.
from x8.
Related Issues (20)
- --replay-proxy issue ? HOT 2
- Improve the max amount of parameters per request detection HOT 1
- Building from sources failed: failed to get `hyper` as a dependency of package `reqwest v0.11.11` HOT 3
- Search for parameters in unordered JSON responses
- Stop brute-forcing for prefix if parameter names on the page are retrieved using a pattern
- как установить? HOT 5
- Implement multithreading
- Allow checking both headers and parameters simultaneously HOT 1
- can not write the output to a file HOT 2
- Error while cargo install and cargo build HOT 1
- Add installation issues chapter to the readme HOT 3
- DNS problem HOT 1
- What does changes reflections mean? HOT 1
- Issue to run after installation HOT 3
- Network connection or i dont know HOT 3
- Installation Error HOT 2
- verbosity still shown even by adding -v 0 HOT 2
- how can run x8 after Download the Zip File HOT 5
- Add a new feature HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from x8.