Skip to content

Commit

Permalink
feat: new relase
Browse files Browse the repository at this point in the history
  • Loading branch information
zema1 committed Nov 30, 2021
1 parent ce735f6 commit 7e24057
Show file tree
Hide file tree
Showing 4 changed files with 22 additions and 18 deletions.
16 changes: 3 additions & 13 deletions .github/workflows/release.md
Original file line number Diff line number Diff line change
@@ -1,16 +1,6 @@
正式发布第一版,这个版本基本实现了最初的设想。

## 核心原理

https://koalr.me/posts/core-concept-of-yarx/

## 更新说明

- 支持 status、header、body 等位置的响应变换
- 支持 `==` `contains` `submatch` 等各种匹配模式
- 支持动态变量的渲染和捕获以及多级规则的变量追踪
- 支持绝大部分内置函数的解析和调用
- 通过路由合并和智能排序等策略有效减少路由冲突
- 平铺式规则处理逻辑,支持并发扫描
- 支持捕获扫描事件做进一步分析联动
- 修复 302 响应 location 为空导致的报错问题
- 增加 action 自动构建打包二进制
- 增加 docker 镜像, 可以通过 `docker pull zemal/yarx:latest` 拉取使用

2 changes: 1 addition & 1 deletion .github/workflows/release.yml
Original file line number Diff line number Diff line change
Expand Up @@ -61,7 +61,7 @@ jobs:
- name: Upload release
uses: softprops/action-gh-release@v1
with:
draft: false
draft: true
body_path: .github/workflows/release.md
files: |
release/yarx_linux_amd64.zip
Expand Down
11 changes: 9 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -27,6 +27,8 @@ Yarx 来自于 `x-r-a-y` 的反向拼写,它能够根据 xray 的 yaml poc 规
+ 平铺式规则处理逻辑,支持并发扫描
+ 支持捕获扫描事件做进一步分析联动

核心原理: [https://koalr.me/posts/core-concept-of-yarx/](https://koalr.me/posts/core-concept-of-yarx/)

## 立即尝试

```bash
Expand All @@ -43,7 +45,12 @@ Yarx 来自于 `x-r-a-y` 的反向拼写,它能够根据 xray 的 yaml poc 规

[https://github.com/zema1/yarx/releases](https://github.com/zema1/yarx/releases)
下载合适的版本然后从命令行运行即可


+ Docker Hub
```bash
docker pull zemal/yarx:latest
```

+ 源码安装
```bash
git clone https://github.com/zema1/yarx
Expand Down Expand Up @@ -137,6 +144,6 @@ Yarx 在解析 poc 的过程中可能会出现错误,这些 poc 不会被加
## 规划
- [ ] 支持 Docker 一键部署
- [x] 支持 Docker 一键部署
- [ ] 支持依赖反连平台的 POC
- [ ] 支持依赖 request 的 POC
11 changes: 9 additions & 2 deletions README_EN.md
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,8 @@ Yarx comes from the reverse spelling of `x-r-a-y`, and it can fully automaticall
+ Support for capturing scan events for further analysis and linkage
+ Support concurrent scans

Core concept of yarx: [https://koalr.me/posts/core-concept-of-yarx/](https://koalr.me/posts/core-concept-of-yarx/)

## Try with xray

```bash
Expand All @@ -38,7 +40,12 @@ After a few second, you will get a vulnerablity report like that: [report.html

[https://github.com/zema1/yarx/releases](https://github.com/zema1/yarx/releases)
Download the release suitable for your platform and run it in cli.


+ Docker Hub
```bash
docker pull zemal/yarx:latest
```

+ Compile Source
```bash
git clone https://github.com/zema1/yarx
Expand Down Expand Up @@ -134,6 +141,6 @@ If you encounter other types of errors, you can submit an issue with the yaml po
## Roadmap
- [ ] Support for Docker deployments
- [x] Support for Docker deployments
- [ ] Support for POCs that rely on `newReverse` variable
- [ ] Support for POCs that rely on `request` variable

0 comments on commit 7e24057

Please sign in to comment.