• 指间主站
• 空间域名
• 企业邮局
• 在线商城
• 帮助中心
• 支付方式
• 收藏本站

• 域名注册
• 网站建设
• 虚拟主机
• 企业邮局
• 智能建站
• 平面设计
• 多媒体制作
• 改版维护
• 网站推广
• 程序开发
• 电脑维修

• ·联系电话:+86.023-75585550
• ·联系传真:+86.023-75585550
• ·24小时手机:13896886023
• ·QQ 咨 询：361652718 513960520

用来bypass一些检测规则或者条件限制

XSS加密还是很常见很常见的。

'''
Python XSS payload encoder
Author: BGS (rstcenter.com)
Contributor cmiN (rstcenter.com)
Date: 13 August 2011
Version: Python 2.7
'''
#!/usr/bin/env python

import time
import sys
import urllib2
import base64

def main():
  
    try:
        if  sys.argv[1] == "help":
            print '[-]'+time.ctime()
            print'''[-]Instructions:
                encoder.py <encoding type> "<string>"
                Available encodings: ascii b64 hex url
[-]Exiting...
             '''
        elif sys.argv[1] == "b64":
            b64_encode()
        elif sys.argv[1] == "ascii":
            ascii_encode()
        elif sys.argv[1] == "hex":
            hex_encode()
        elif sys.argv[1] == "url":
            url_encode()
          
        else:
            sys.exit(1)
    except Exception, e:
        print 'Type "encoder.py help" for instructions! '
        sys.exit(1)
  
  
def b64_encode():
    payload = sys.argv[2]
    encoded = base64.standard_b64encode(payload)
    print ' ################## B64 String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"

  
def ascii_encode():
    payload = sys.argv[2]
    string = ''
  
    for w in payload:
        string += str(ord(w)) + ","
    print ' ################## ASCII String #####################'
    print ''
    print 'string.fromCharCode(' + string.strip(",") +')'
    print ''
    print "#################### >>EOF<< #########################"

def hex_encode():
    payload = sys.argv[2]
    encoded = payload.encode('hex')
    print ' ################## HEX String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"
  
  
  

def url_encode():
    payload = sys.argv[2]
    encoded = urllib2.quote(payload.encode("utf8")) 
    print ' ################## URL String #######################'
    print ''
    print 'String:' + encoded
    print ''
    print "#################### >>EOF<< #########################"

if __name__ == '
References

http://www.lo0.ro/2011/python-xss-payload-encoder/

http://monyer.com/demo/monyerjs/

http://tools88.com/safe/MonyerEn.php