mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-03-31 00:09:29 +02:00
66 lines
1.5 KiB
YAML
66 lines
1.5 KiB
YAML
name: "x8"
|
|
command: "x8"
|
|
enabled: true
|
|
short_description: "隐藏参数发现工具"
|
|
description: |
|
|
X8是一个用于发现Web应用中隐藏参数的工具。
|
|
|
|
**主要功能：**
|
|
- 隐藏参数发现
|
|
- 多种HTTP方法支持
|
|
- 自定义字典
|
|
- 快速扫描
|
|
|
|
**使用场景：**
|
|
- 参数发现
|
|
- Web应用安全测试
|
|
- Bug bounty侦察
|
|
- 安全测试
|
|
parameters:
|
|
- name: "url"
|
|
type: "string"
|
|
description: "目标URL"
|
|
required: true
|
|
flag: "--url"
|
|
format: "flag"
|
|
- name: "wordlist"
|
|
type: "string"
|
|
description: "参数字典"
|
|
required: false
|
|
flag: "--wordlist"
|
|
format: "flag"
|
|
default: "/usr/share/wordlists/x8/params.txt"
|
|
- name: "method"
|
|
type: "string"
|
|
description: "HTTP方法"
|
|
required: false
|
|
flag: "--method"
|
|
format: "flag"
|
|
default: "GET"
|
|
- name: "body"
|
|
type: "string"
|
|
description: "请求体"
|
|
required: false
|
|
flag: "--body"
|
|
format: "flag"
|
|
- name: "headers"
|
|
type: "string"
|
|
description: "自定义请求头"
|
|
required: false
|
|
flag: "--headers"
|
|
format: "flag"
|
|
- name: "additional_args"
|
|
type: "string"
|
|
description: |
|
|
额外的x8参数。用于传递未在参数列表中定义的x8选项。
|
|
|
|
**示例值：**
|
|
- 根据工具特性添加常用参数示例
|
|
|
|
**注意事项：**
|
|
- 多个参数用空格分隔
|
|
- 确保参数格式正确，避免命令注入
|
|
- 此参数会直接追加到命令末尾
|
|
required: false
|
|
format: "positional"
|