{"action":"created","issue":{"url":"https://api.github.com/repos/Arachni/arachni/issues/626","labels_url":"https://api.github.com/repos/Arachni/arachni/issues/626/labels{/name}","comments_url":"https://api.github.com/repos/Arachni/arachni/issues/626/comments","events_url":"https://api.github.com/repos/Arachni/arachni/issues/626/events","html_url":"https://github.com/Arachni/arachni/issues/626","id":112449561,"number":626,"title":" URI Encoding in attack payloads","user":{"login":"tenscottc","id":15220020,"avatar_url":"https://avatars.githubusercontent.com/u/15220020?v=3","gravatar_id":"","url":"https://api.github.com/users/tenscottc","html_url":"https://github.com/tenscottc","followers_url":"https://api.github.com/users/tenscottc/followers","following_url":"https://api.github.com/users/tenscottc/following{/other_user}","gists_url":"https://api.github.com/users/tenscottc/gists{/gist_id}","starred_url":"https://api.github.com/users/tenscottc/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/tenscottc/subscriptions","organizations_url":"https://api.github.com/users/tenscottc/orgs","repos_url":"https://api.github.com/users/tenscottc/repos","events_url":"https://api.github.com/users/tenscottc/events{/privacy}","received_events_url":"https://api.github.com/users/tenscottc/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/Arachni/arachni/labels/Feature%20request","name":"Feature request","color":"444444"}],"state":"open","locked":false,"assignee":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"milestone":{"url":"https://api.github.com/repos/Arachni/arachni/milestones/12","html_url":"https://github.com/Arachni/arachni/milestones/v1.4","labels_url":"https://api.github.com/repos/Arachni/arachni/milestones/12/labels","id":1332769,"number":12,"title":"v1.4","description":"","creator":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"open_issues":3,"closed_issues":1,"state":"open","created_at":"2015-10-01T09:05:39Z","updated_at":"2015-10-20T20:08:03Z","due_on":null,"closed_at":null},"comments":3,"created_at":"2015-10-20T20:07:10Z","updated_at":"2015-10-23T06:34:04Z","closed_at":null,"body":"The current default encoding technique when sending the attack requests appears to be that the URI is url-encoded.  This feature request is to add support for an option to send payload without url-encoding as the default.\r\n\r\nFor instance, ideally there would be an command line option to specify with url-encoding, without, or sending the same payload with and then without to help give more control and ability to catch a few other cases of XSS that in some cases might not be flagged.  This was created in response to http://support.arachni-scanner.com/discussions/questions/12618-uri-encoding\r\n\r\nThank you!"},"comment":{"url":"https://api.github.com/repos/Arachni/arachni/issues/comments/150488826","html_url":"https://github.com/Arachni/arachni/issues/626#issuecomment-150488826","issue_url":"https://api.github.com/repos/Arachni/arachni/issues/626","id":150488826,"user":{"login":"Zapotek","id":375743,"avatar_url":"https://avatars.githubusercontent.com/u/375743?v=3","gravatar_id":"","url":"https://api.github.com/users/Zapotek","html_url":"https://github.com/Zapotek","followers_url":"https://api.github.com/users/Zapotek/followers","following_url":"https://api.github.com/users/Zapotek/following{/other_user}","gists_url":"https://api.github.com/users/Zapotek/gists{/gist_id}","starred_url":"https://api.github.com/users/Zapotek/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Zapotek/subscriptions","organizations_url":"https://api.github.com/users/Zapotek/orgs","repos_url":"https://api.github.com/users/Zapotek/repos","events_url":"https://api.github.com/users/Zapotek/events{/privacy}","received_events_url":"https://api.github.com/users/Zapotek/received_events","type":"User","site_admin":false},"created_at":"2015-10-23T06:34:04Z","updated_at":"2015-10-23T06:34:04Z","body":"Used the wrong issue ID in relevant commits:\r\n* c07521cee0600e8bef2ad4807a0fe25b8cc74e9d\r\n* ea4081b2bf838ac75fb1d34687b82138ab0f025c\r\n* 93f773c954d4cc60c38b309678aca7d44e0d91f6\r\n\r\nI'll be working on this in [arachni/optional-request-encoding](https://github.com/Arachni/arachni/tree/optional-request-encoding)."}}