generating hta page + hta question ?
Nobody has claimed this yet.
- Dominant language
- Python
- Stars
- 765
- Forks
- 157
- PR merge metrics
- No merged PRs in 30d
Description
I am using kali 2020.4 I made a brand new install of octopus to be sure no modification had been done on my end, with still issues getting pycrypto so pycryto is missing (see https://github.com/mhaskar/Octopus/issues/23)
I encounter an issue I didn't have before the hta page is blank which wasn't a problem before

I have another question as well so not really a problem rather I am trying to understand something about the program
so this time on a modified (just putted a few prints) version of the program (not the clean install used before )

I was trying to understand how the hta was generated and I reached this point and to understand what I am dealing with I putted some prints
here is the output

so from this, I have multiple questions:
1: how is definied the variable i because from this prints i understand it is an array of length 2 containing item of the re array
like re[0] is [ ']' , '=' ] and so i = [ ']' , '=' ] which mean i[0]=']' and i[1] = '='
but where is all of that created and defined I see where re is created but that is it.
2:in the for loop I see you are replacing characters by others in the variable js which has been encoded in base64
I assume this is for code obfuscation
but it doesn't raise a question how is the code going to work if you modify it by that I mean that before the for loop i can decode the base64 no problem

but rather obviously trying to decode the last iteration is proven to be useless

so even if the hta page wasn't blank and was outputting the code (which is what it was doing for me before the code was given to me on the page) the code still wouldn't work because it would not be decodable right?
I assume I am missing something
many thanks in advance for the answer and I try to understand why the page is blank it could very well be a Mozilla problem on my end of security or something like that i am checking for that
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by reproducing the blank HTA page on Kali 2020.4 and inspect the HTA-generation path around the `re` and `js` variables and replacement loop described in the issue. Trace how the generated page is assembled and verify whether the resulting output loads and decodes as intended; the blank page and unanswered variable questions should be resolved.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- javascript, powershell, python
- Domain
- backend, security
- Issue type
- Bug
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100