支持-u url或者-uf url.txt,进行url批量扫描

2026-09-24 12:11:52 +08:00 · 2021-03-04 14:42:10 +08:00
parent 423c0bebea
commit 5e7def5085
16 changed files with 65 additions and 26 deletions
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth1
 rules:
  - method: GET
    path: /swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth2
 rules:
  - method: GET
    path: /api/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth3
 rules:
  - method: GET
    path: /service/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth4
 rules:
  - method: GET
    path: /web/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth5
 rules:
  - method: GET
    path: /swagger/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth6
 rules:
  - method: GET
    path: /actuator/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui-unauth7
 rules:
  - method: GET
    path: /libs/swagger-ui.html
@@ -1,4 +1,4 @@
-name: poc-yaml-druid-monitor-unauth
+name: poc-yaml-swagger-ui8
 rules:
  - method: GET
    path: /template/swagger-ui.html
@@ -4,7 +4,7 @@ rules:
    path: /console/images/%252E./console.portal
    follow_redirects: false
    expression: |
-      response.status == 302 && (response.body.bcontains(bytes("/console/console.portal")) || response.body.bcontains(bytes("/console/jsp/common/NoJMX.jsp")))
+      (response.status == 302 && response.body.bcontains(bytes("/console/console.portal")) || response.body.bcontains(bytes("/console.portal?_nfpb=true")))
 detail:
  author: canc3s(https://github.com/canc3s),Soveless(https://github.com/Soveless)
  weblogic_version: 10.3.6.0.0, 12.1.3.0.0, 12.2.1.3.0, 12.2.1.4.0, 14.1.1.0.0