OWASP/ZSC

shell-storm download mangles quotes

Closed this issue · 2 comments

shell-storm payloads display with quotes (") changed to the HTML escaped version ("). I have not checked every shell-storm payload, but the ones I have checked all show this happening.

BRIBEA-COTP-1:OWASP-ZSC brianbeaudry$ python zsc.py --shell-storm download 73 | tail -n 15
char main[]=
"\x31\xc0\x31\xdb\x31\xc9\x31\xd2"
"\xeb\x32\x5b\xb0\x05\x31\xc9\xcd"
"\x80\x89\xc6\xeb\x06\xb0\x01\x31"
"\xdb\xcd\x80\x89\xf3\xb0\x03\x83"
"\xec\x01\x8d\x0c\x24\xb2\x01\xcd"
"\x80\x31\xdb\x39\xc3\x74\xe6\xb0"
"\x04\xb3\x01\xb2\x01\xcd\x80\x83"
"\xc4\x01\xeb\xdf\xe8\xc9\xff\xff"
"\xff"
"/etc/passwd"; //Put here the file path, default is /etc/passwd

BRIBEA-COTP-1:OWASP-ZSC brianbeaudry$

I pushed some code to fix this however I did not test on python 3. If somebody could verify that the solution works with py3 that would be great!

Hi Brian, I've tested it on python3, it's fixed, thank you.