Wersijowa historija Eval Villain - 24 wersijow
Eval Villain wot bemodtwz
Budźće kedźbliwy ze staršimi wersijemi! Tute wersije so za testowanje a referencne zaměry pokazuja.Wy měł přeco najnowšu wersiju přidatka wužiwać.
Najnowša wersija
Wersija 2.11
13. stu. 2024 wozjewjene - 53,89 KBFunguje z firefox 58.0 a pozdźišoFixes bug where localStorage is not properly sourced
Improves encoder function for path search
Fixes mistake is sourcer debug statmentŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Firefox sćahnyć a rozšěrjenje wobstaraćTrjebaće Firefox, zo byšće tute rozšěrjenje wužiwałStarše wersije
Wersija 2.10
11. stu. 2024 wozjewjene - 53,74 KBFunguje z firefox 58.0 a pozdźišo* Copy Eval Villain Injection or Config from the configuration page and paste into any JavaScript file to get Eval Villain into other browsers or contexts.
* Better defaults for actual testing. Including CSPT and postMessage sinks.
* Set limits on source banks in the configuration page
* Lots of refactoringŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.9
22. ruj. 2023 wozjewjene - 41,75 KBFunguje z firefox 48.0 a pozdźišo* Use evSourcer to dynamically add to sources via instrumentation.
* Use evSinker as a dynamic sink to be used with instrumentation.
* EV now warns when it fails to load in a frame.
* Replace console.log with console.info in the web page to avoid the pages logs cluttering up Eval Villain output.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.8
9. ožu. 2023 wozjewjene - 40,88 KBFunguje z firefox 48.0 a pozdźišoFix output of regex needles without global flagŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.7
6. velj. 2022 wozjewjene - 40,87 KBFunguje z firefox 59.0 a pozdźišoAdd function URLSearchParams.get to default config, disabled by default
Spelling fixes
Fix scope to preventing vars leaking into `window`Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.6
26. srp. 2021 wozjewjene - 41,02 KBFunguje z firefox 59.0 a pozdźišoConstructors (like `new Function`) are now hooked.
Better proto hooking (like `value(Range.createContextualFragment)`).Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.5
28. tra. 2021 wozjewjene - 40,82 KBFunguje z firefox 59.0 a pozdźišoFix bug where you couldn't delete a config item
Provided encoder function will provide a second parameter now, using `encoder("payload", true)` should cause the payload to be inserted into the DOM XSS source.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.4
15. tra. 2021 wozjewjene - 40,57 KBFunguje z firefox 59.0 a pozdźišoFix minor bug for configuration name collisionsŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.3
13. tra. 2021 wozjewjene - 40,48 KBFunguje z firefox 59.0 a pozdźišo* When a encoded source is found in a sink, a encoding function in JavaScript will be printed to the console. This function lets you see how Eval Villain decoded the source, and lets you quickly encode your own payloads.
* Large text will receive it's own closed console.group to improve readability.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.2
26. sij. 2021 wozjewjene - 41,24 KBFunguje z firefox 59.0 a pozdźišo2 Major Changes
* EV will now recursively decode DOM XSS sources for URL, base64 and JSON encoding. Decoded values will then be used to search input to the hooked functions.
* Blacklists were previously applied to all input. I found this to be mostly useless. Now blacklists are applied to decoded input sources. So you can blacklist `/^true$/` and a URL parameter that is set to `true` won't cause all `eval` calls containing `true` to be marked as interesting.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.1
14. srp. 2020 wozjewjene - 41,25 KBFunguje z firefox 59.0 a pozdźišoIt is now safe to hook decodeURI, and decodeURIComponent. This can be helpful for finding where inputs are parsed.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 2.0
9. ožu. 2020 wozjewjene - 41,22 KBFunguje z firefox 59.0 a pozdźišoRefactoring should improve speed and performance.
Monitors sinks for window nameŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.11
22. kol. 2019 wozjewjene - 40,49 KBFunguje z firefox 59.0 a pozdźišoTypes: enable/disable types that you are interested.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.10
6. kol. 2019 wozjewjene - 40,17 KBFunguje z firefox 59.0 a pozdźišoUsing `Reflect.apply` for proxying to reduce bugs. Thanks Mike Samuel!
Show argument types
Better handling of multiple arguments to a function.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.9
25. lip. 2019 wozjewjene - 40,01 KBFunguje z firefox 59.0 a pozdźišoFeatures:
* Toggle Eval Villain with key commands
Bug fixes:
Functions are now hooked using `Proxy`. Eval Villain should break fewer pages. Reference: https://developer.mozilla.org/en-US/docs/Web/JavaScript/Reference/Global_Objects/ProxyŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.8
13. lip. 2019 wozjewjene - 40,07 KBFunguje z firefox 59.0 a pozdźišoURL Decode bug fixŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.7
11. lip. 2019 wozjewjene - 40,01 KBFunguje z firefox 59.0 a pozdźišoFixed bug in query searchŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.6
11. lip. 2019 wozjewjene - 40,01 KBFunguje z firefox 59.0 a pozdźišoFunction hooks now handle multiple arguments
Hook `Function` if you want, likely to break webpages though
Bug fixes/improved query searchŽórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.5
2. sij. 2019 wozjewjene - 36,47 KBFunguje z firefox 59.0 a pozdźišoHandles malformed URI encoding without breaking code flow.
Having console.log remapped by the page should no longer interfere with output.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.4
14. kol. 2018 wozjewjene - 36,4 KBFunguje z firefox 59.0 a pozdźišo, android 59.0 do 68.** fix URL decode logic bug
* No longer search for URL parameter names.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.3
10. kol. 2018 wozjewjene - 36,41 KBFunguje z firefox 59.0 a pozdźišo, android 59.0 do 68.** fixed a couple RegEx needle highlighting bugs
* fragment and query search now also check if the value has been URL decoded.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.2
7. kol. 2018 wozjewjene - 35,91 KBFunguje z firefox 59.0 a pozdźišo, android 59.0 do 68.*This version just improves the UI some.Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.1
2. kol. 2018 wozjewjene - 36,06 KBFunguje z firefox 59.0 a pozdźišo, android 59.0 do 68.*Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0
Wersija 1.0
2. kol. 2018 wozjewjene - 36,07 KBFunguje z firefox 59.0 a pozdźišo, android 59.0 do 68.*Žórłowy kod je pod licencu Jenož licenca GNU General Public License v3.0