name: "x8" command: "x8" enabled: true short_description: "隐藏参数发现工具" description: | X8是一个用于发现Web应用中隐藏参数的工具。 **主要功能:** - 隐藏参数发现 - 多种HTTP方法支持 - 自定义字典 - 快速扫描 **使用场景:** - 参数发现 - Web应用安全测试 - Bug bounty侦察 - 安全测试 parameters: - name: "url" type: "string" description: "目标URL" required: true flag: "--url" format: "flag" - name: "wordlist" type: "string" description: "参数字典" required: false flag: "--wordlist" format: "flag" default: "/usr/share/wordlists/x8/params.txt" - name: "method" type: "string" description: "HTTP方法" required: false flag: "--method" format: "flag" default: "GET" - name: "body" type: "string" description: "请求体" required: false flag: "--body" format: "flag" - name: "headers" type: "string" description: "自定义请求头" required: false flag: "--headers" format: "flag" - name: "additional_args" type: "string" description: | 额外的x8参数。用于传递未在参数列表中定义的x8选项。 **示例值:** - 根据工具特性添加常用参数示例 **注意事项:** - 多个参数用空格分隔 - 确保参数格式正确,避免命令注入 - 此参数会直接追加到命令末尾 required: false format: "positional"