Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

question marks are used instead of Russian characters in the request #138

Open
djtemasuper opened this issue Aug 18, 2023 · 5 comments
Open

Comments

@djtemasuper
Copy link

hello, why when I use Russian characters anywhere in the script, instead of them Turbo Intruder puts question marks everywhere, moreover, when I try to encode a string with Russian characters through str.encode('utf-8'), this function does not convert the string in the Turbo Intruder script although everything works correctly in the python interpreter.
image
image
image

@albinowax
Copy link
Contributor

Turbo Intruder uses Jython which is based on Python 2.7 which stores strings as ASCII. You're using Python 3 locally which handles strings completely differently.

@albinowax
Copy link
Contributor

I'm leaving this open because it's definitely possible there's still Turbo Intruder bugs in this area. If you aren't able to fix your issue it would be useful to have a script that demonstrates the exact problem you're experiencing - eg trying to send a request containing russian characters, or viewing a response with them.

@djtemasuper
Copy link
Author

I am experiencing the same problems with non ascii character encoding, different engines have different problems:

  1. HTTP2 Engine problem with encoding in the response, instead of the response in the body of the request an incomprehensible set of characters is displayed.
    Request:
POST /post HTTP/2
Host: httpbingo.org
Content-Length: 10
Accept: application/json
Content-Type: text/html; charset=utf-8;
Accept-Encoding: gzip, deflate, br
Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7

пы

Response:
image

  1. BURP2 Engine due to a problem with the encoding of the request body, the server does not respond to the request (errors 400 Bad request, and as in the example, the response in general did not come).
    Request:
POST /post HTTP/2
Host: httpbingo.org
Content-Length: 10
Accept: application/json
Content-Type: text/html; charset=utf-8;
Accept-Encoding: gzip, deflate, br
Accept-Language: ru-RU,ru;q=0.9,en-US;q=0.8,en;q=0.7

пы

Response:
image

@albinowax
Copy link
Contributor

@djtemasuper with the HTTP2 engine, that looks like brotli encoding. Try removing the 'accept-encoding' request header.

@djtemasuper
Copy link
Author

djtemasuper commented Feb 19, 2024

@djtemasuper with the HTTP2 engine, that looks like brotli encoding. Try removing the 'accept-encoding' request header.

Yes, indeed, in the HTTP2 engine the problem was in the Accept-Encoding header, without it the response comes in normally

@PortSwigger PortSwigger deleted a comment Apr 2, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Development

No branches or pull requests

2 participants