sensepost / wadi Goto Github PK
View Code? Open in Web Editor NEWWadi Fuzzing Harness
License: Creative Commons Zero v1.0 Universal
Wadi Fuzzing Harness
License: Creative Commons Zero v1.0 Universal
'tagName':'ULIST',
Shouldn't it be just 'UL'?
cheers!
Hi,
['setRangeText',[function() {return rint(2) ? '"'+string(rint(STR_NUM))+'"':'""'},function() {return rint(2) ? '"'+string(rint(STR_NUM))+'",'+rint(ra(INT_NUMS))+","+rint(ra(INT_NUMS)):'"'+string(rint(STR_NUM))+'",'+randoms()+","+randoms()},function() {return rint(2) ? '"'+string(rint(STR_NUM))+'",'+rint(ra(INT_NUMS))+","+rint(ra(INT_NUMS))+","+ra(['"select"','"start"','"end"','"preserve"','""']):'"'+string(rint(STR_NUM))+'",'+randoms()+","+randoms()+",",ra(['"select"','"start"','"end"','"preserve"','""'])},''],'high'],
If you notice the last part of it ->
(+",",ra(['"select"','"start"','"end"','"preserve"','""'])},''],'high'],)
I think it should have been:
(+","+ra(['"select"','"start"','"end"','"preserve"','""'])},''],'high'],)
['filter',[function() {return "{acceptNode:"+ra(['NodeFilter.FILTER_REJECT','NodeFilter.FILTER_SKIP','NodeFilter.FILTER_REJECT'
I believe, instead of two FILTER_REJECT, one should be FILTER_ACCEPT.
Cheers!
Shouldn't it be just OL ?
Cheers!
Hi,
Noticed in IE.js module.
HTMLTableHeaderCellElementInterface has been defined twice; once for 'TH' and once for 'THEAD' and var ElementArray = [] has also got 2 entries for it.
I believe name of one shall be changed else you never know which one is getting execution chance.
Cheers!
Hi,
When I start waid with "python wadi.py randoms.js 8000", it always like that:
D:\wadi>python wadi.py randoms.js 8000
[] Running Server Process 3732
Serving at port 8000
Process Process-4:
Traceback (most recent call last):
File "C:\Python27\lib\multiprocessing\process.py", line 258, in bootstrap
self.run()
File "C:\Python27\lib\multiprocessing\process.py", line 114, in run
self.target(self.args, *self.kwargs)
File "D:\wadi\wadi.py", line 28, in run_debugger
debugger.run_Browser('IE')
File "D:\wadi\wadi_debug_win.py", line 180, in run_Browser
self.p1,self.p1name = self.system.find_processes_by_filename(self.exe)[0]
IndexError: list index out of range
[] Debugger Process 3620 exited
[] No Crashes
[] No TestCases
[] Terminating Debugger Process PID: 2504
[] Debugger Process 2504 exited
[] No Crashes
[] No TestCases
Process Process-6:
Traceback (most recent call last):
File "C:\Python27\lib\multiprocessing\process.py", line 258, in bootstrap
self.run()
File "C:\Python27\lib\multiprocessing\process.py", line 114, in run
self.target(self.args, *self.kwargs)
File "D:\wadi\wadi.py", line 28, in run_debugger
debugger.run_Browser('IE')
File "D:\wadi\wadi_debug_win.py", line 187, in run_Browser
self.broker_process,self.broker_name = self.system.find_processes_by_filename(self.rt_broker)[0]
IndexError: list index out of range
[] Debugger Process 4248 exited
[] No Crashes
[] No TestCases
Attached to process C:\Windows\System32\RuntimeBroker.exe
Attached to process C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
Attached to process C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Attached to process C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
Attached to process C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
[] Terminating Debugger Process PID: 6044
[] Debugger Process 6044 exited
[] No Crashes
[_] No TestCases
Process Process-8:
Traceback (most recent call last):
File "C:\Python27\lib\multiprocessing\process.py", line 258, in _bootstrap
self.run()
File "C:\Python27\lib\multiprocessing\process.py", line 114, in run
self._target(_self.args, *self.kwargs)
File "D:\wadi\wadi.py", line 28, in run_debugger
debugger.run_Browser('IE')
File "D:\wadi\wadi_debug_win.py", line 187, in run_Browser
self.broker_process,self.broker_name = self.system.find_processes_by_filename(self.rt_broker)[0]
IndexError: list index out of range
[] Debugger Process 4240 exited
[] No Crashes
[] No TestCases
Traceback (most recent call last):
File "wadi.py", line 125, in
w.run()
File "wadi.py", line 98, in run
if not self.debugger_process.is_alive():
File "C:\Python27\lib\multiprocessing\process.py", line 159, in is_alive
return self._popen.returncode is None
KeyboardInterrupt
Process Process-9:
........
and my edge version is 25.10586.0.0, and OS is win10 professional with 32bit.
Thanks!
I believe following is typo:
else if (evt[1] == 'ProgrssEvent') {
"
else if (evt[1] == 'ProgrssEvent') {
returnArray = returnArray.concat('var '+e+'= new PorgressEvent("'+evt[0]+'",{ "bubbles":'+randbool()+', "cancelable":'+randbool()+', "lengthComputable":'+randbool()+', "loaded":'+rint(ra(INT_NUMS))+', "total":'+rint(ra(INT_NUMS))+'})')
}
"
Hi,
Under HTML FORM, I see a typo -
'Methods':[
['sumbit',[function() {return ''}],'high'],
In "Canvas2d.js", following function prepares 'returnString' but doesn't return anything though it's been called at few places.
strokeStyleFunc = function() {
var returnString = ''
switch(rint(3)) {
case 0:
returnString += 'ctx.createLinearGradient('+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+')'
break;
case 1:
returnString += 'ctx.createRadialGradient('+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+','+ra([rint(ra(INT_NUMS)),floatValue()])+')'
break;
case 2:
returnString += 'ctx.createPattern(img,"'+ra(['repeat','repeat-x','repeat-y','no-repeat',''])+'")'
break;
}
}
Traceback (most recent call last):
File "C:\Python27\lib\multiprocessing\process.py", line 267, in _bootstrap
self.run()
File "C:\Python27\lib\multiprocessing\process.py", line 114, in run
self._target(*self._args, **self._kwargs)
File "C:\Users\hp\Documenti\wadi-master\wadi.py", line 28, in run_debugger
debugger.run_Browser('IE')
File "C:\Users\hp\Documenti\wadi-master\wadi_debug_win.py", line 180, in run_Browser
self.p1,self.p1name = self.system.find_processes_by_filename(self.exe)[0]
IndexError: list index out of range
A declarative, efficient, and flexible JavaScript library for building user interfaces.
๐ Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. ๐๐๐
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google โค๏ธ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.