13

XSS 扫描器成长记-极客君的博客

 4 years ago
source link: https://blog.51cto.com/14425409/2471506
Go to the source link to view the article. You can view the picture content, updated content and better typesetting reading experience. If the link is broken, please click the button below to view the snapshot at that time.
neoserver,ios ssh client
作者:w7ay@知道创宇404实验室时间:2020年2月12日原文地址:https://paper.seebug.org/1119/为了实现自动刷SRC的目标,过年前就开始对w13scan的xss扫描功能进行优化,灵感来源于xray所宣称的基于语义的扫描技术。之前xss扫描是参考w3af中的源码,原理也很简单就是暴力的使用xss的payload进行请求,最后在返回文本中查找关键字,xsspaylo

About Joyk


Aggregate valuable and interesting links.
Joyk means Joy of geeK