mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-03-31 00:09:29 +02:00
80 lines
1.9 KiB
YAML
80 lines
1.9 KiB
YAML
name: "zap"
|
||
command: "zap-cli"
|
||
enabled: false
|
||
short_description: "OWASP ZAP Web应用安全扫描器"
|
||
description: |
|
||
OWASP ZAP是一个Web应用安全扫描器，用于发现Web应用中的安全漏洞。
|
||
|
||
**主要功能：**
|
||
- Web应用安全扫描
|
||
- 主动和被动扫描
|
||
- API测试
|
||
- 详细报告
|
||
|
||
**使用场景：**
|
||
- Web应用安全测试
|
||
- 漏洞扫描
|
||
- 安全评估
|
||
- 渗透测试
|
||
parameters:
|
||
- name: "target"
|
||
type: "string"
|
||
description: "目标URL"
|
||
required: true
|
||
flag: "-t"
|
||
format: "flag"
|
||
- name: "scan_type"
|
||
type: "string"
|
||
description: "扫描类型（baseline, full, api）"
|
||
required: false
|
||
flag: "--scan-type"
|
||
format: "flag"
|
||
default: "baseline"
|
||
- name: "api_key"
|
||
type: "string"
|
||
description: "ZAP API密钥"
|
||
required: false
|
||
flag: "--api-key"
|
||
format: "flag"
|
||
- name: "daemon"
|
||
type: "bool"
|
||
description: "以守护进程模式运行"
|
||
required: false
|
||
flag: "--daemon"
|
||
format: "flag"
|
||
default: false
|
||
- name: "port"
|
||
type: "string"
|
||
description: "ZAP守护进程端口"
|
||
required: false
|
||
flag: "--port"
|
||
format: "flag"
|
||
default: "8090"
|
||
- name: "format_type"
|
||
type: "string"
|
||
description: "输出格式（xml, json, html）"
|
||
required: false
|
||
flag: "--format"
|
||
format: "flag"
|
||
default: "xml"
|
||
- name: "output_file"
|
||
type: "string"
|
||
description: "输出文件路径"
|
||
required: false
|
||
flag: "--output"
|
||
format: "flag"
|
||
- name: "additional_args"
|
||
type: "string"
|
||
description: |
|
||
额外的zap参数。用于传递未在参数列表中定义的zap选项。
|
||
|
||
**示例值：**
|
||
- 根据工具特性添加常用参数示例
|
||
|
||
**注意事项：**
|
||
- 多个参数用空格分隔
|
||
- 确保参数格式正确，避免命令注入
|
||
- 此参数会直接追加到命令末尾
|
||
required: false
|
||
format: "positional"
|