From 7e24057610899a317b63dc9b3bd115bea87dfcd5 Mon Sep 17 00:00:00 2001 From: zema1 Date: Tue, 30 Nov 2021 11:58:45 +0800 Subject: [PATCH] feat: new relase --- .github/workflows/release.md | 16 +++------------- .github/workflows/release.yml | 2 +- README.md | 11 +++++++++-- README_EN.md | 11 +++++++++-- 4 files changed, 22 insertions(+), 18 deletions(-) diff --git a/.github/workflows/release.md b/.github/workflows/release.md index 0f4f8fa..089c534 100644 --- a/.github/workflows/release.md +++ b/.github/workflows/release.md @@ -1,16 +1,6 @@ -正式发布第一版,这个版本基本实现了最初的设想。 - -## 核心原理 - -https://koalr.me/posts/core-concept-of-yarx/ - ## 更新说明 -- 支持 status、header、body 等位置的响应变换 -- 支持 `==` `contains` `submatch` 等各种匹配模式 -- 支持动态变量的渲染和捕获以及多级规则的变量追踪 -- 支持绝大部分内置函数的解析和调用 -- 通过路由合并和智能排序等策略有效减少路由冲突 -- 平铺式规则处理逻辑,支持并发扫描 -- 支持捕获扫描事件做进一步分析联动 +- 修复 302 响应 location 为空导致的报错问题 +- 增加 action 自动构建打包二进制 +- 增加 docker 镜像, 可以通过 `docker pull zemal/yarx:latest` 拉取使用 diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 9435147..678dbb1 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -61,7 +61,7 @@ jobs: - name: Upload release uses: softprops/action-gh-release@v1 with: - draft: false + draft: true body_path: .github/workflows/release.md files: | release/yarx_linux_amd64.zip diff --git a/README.md b/README.md index c7189cc..796bc11 100644 --- a/README.md +++ b/README.md @@ -27,6 +27,8 @@ Yarx 来自于 `x-r-a-y` 的反向拼写,它能够根据 xray 的 yaml poc 规 + 平铺式规则处理逻辑,支持并发扫描 + 支持捕获扫描事件做进一步分析联动 +核心原理: [https://koalr.me/posts/core-concept-of-yarx/](https://koalr.me/posts/core-concept-of-yarx/) + ## 立即尝试 ```bash @@ -43,7 +45,12 @@ Yarx 来自于 `x-r-a-y` 的反向拼写,它能够根据 xray 的 yaml poc 规 [https://github.com/zema1/yarx/releases](https://github.com/zema1/yarx/releases) 下载合适的版本然后从命令行运行即可 - + ++ Docker Hub + ```bash + docker pull zemal/yarx:latest + ``` + + 源码安装 ```bash git clone https://github.com/zema1/yarx @@ -137,6 +144,6 @@ Yarx 在解析 poc 的过程中可能会出现错误,这些 poc 不会被加 ## 规划 -- [ ] 支持 Docker 一键部署 +- [x] 支持 Docker 一键部署 - [ ] 支持依赖反连平台的 POC - [ ] 支持依赖 request 的 POC diff --git a/README_EN.md b/README_EN.md index fa7dee1..a655338 100644 --- a/README_EN.md +++ b/README_EN.md @@ -22,6 +22,8 @@ Yarx comes from the reverse spelling of `x-r-a-y`, and it can fully automaticall + Support for capturing scan events for further analysis and linkage + Support concurrent scans +Core concept of yarx: [https://koalr.me/posts/core-concept-of-yarx/](https://koalr.me/posts/core-concept-of-yarx/) + ## Try with xray ```bash @@ -38,7 +40,12 @@ After a few second, you will get a vulnerablity report like that: [report.html [https://github.com/zema1/yarx/releases](https://github.com/zema1/yarx/releases) Download the release suitable for your platform and run it in cli. - + ++ Docker Hub + ```bash + docker pull zemal/yarx:latest + ``` + + Compile Source ```bash git clone https://github.com/zema1/yarx @@ -134,6 +141,6 @@ If you encounter other types of errors, you can submit an issue with the yaml po ## Roadmap -- [ ] Support for Docker deployments +- [x] Support for Docker deployments - [ ] Support for POCs that rely on `newReverse` variable - [ ] Support for POCs that rely on `request` variable