We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
dirscan/admin/default 扫描会出现不同后缀的结果 好像也是1.9.x新版本的问题,之前1.8.x的版本没发现这个问题
dirscan/admin/default
https://example.com/admin.html https://example.com/admin.jsp https://example.com/admin.do https://example.com/admin.asp https://example.com/admin https://example.com/admin/
The text was updated successfully, but these errors were encountered:
https://example.com/.bashrc dirscan/system/config https://example.com/.zshrc dirscan/system/config https://example.com/.bash_profile dirscan/system/config https://example.com/.bash_logout dirscan/system/config https://example.com/code.tar.gz dirscan/backup/code https://example.com/src.tar.gz dirscan/backup/code https://example.com/htdocs.tar.gz dirscan/backup/code https://example.com/webserver.tar.gz dirscan/backup/code https://example.com/tools.tar.gz dirscan/backup/code ........ dirscan/backup/code
再补充一个就是dirscan扫描会出现大量误报结果,源站实际是访问任意路径都会下载一个文件,但是文件大小都是相同的。 可否先请求一个不存在的文件验证一下文件大小,然后排除这些误报的结果。
Sorry, something went wrong.
可以判断响应头,响应头里有响应类型,把常见的文件类型响应捋一捋,能减少误判。
收到建议,我们后续回优化一下dirscan这个插件
No branches or pull requests
dirscan/admin/default
扫描会出现不同后缀的结果好像也是1.9.x新版本的问题,之前1.8.x的版本没发现这个问题
The text was updated successfully, but these errors were encountered: