mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-04-21 02:06:46 +02:00
公明
59 lines
1.4 KiB
YAML
59 lines
1.4 KiB
YAML
name: "paramspider"
|
|
command: "paramspider"
|
|
enabled: true
|
|
short_description: "从Web档案中挖掘参数"
|
|
description: |
|
|
ParamSpider从Web档案中挖掘参数，用于发现隐藏的参数。
|
|
|
|
**主要功能：**
|
|
- 参数挖掘
|
|
- Web档案查询
|
|
- 多级深度支持
|
|
- 扩展名过滤
|
|
|
|
**使用场景：**
|
|
- 参数发现
|
|
- Bug bounty侦察
|
|
- Web应用安全测试
|
|
- 安全测试
|
|
parameters:
|
|
- name: "domain"
|
|
type: "string"
|
|
description: "目标域名"
|
|
required: true
|
|
flag: "-d"
|
|
format: "flag"
|
|
- name: "level"
|
|
type: "int"
|
|
description: "挖掘深度级别"
|
|
required: false
|
|
flag: "-l"
|
|
format: "flag"
|
|
default: 2
|
|
- name: "exclude"
|
|
type: "string"
|
|
description: "要排除的文件扩展名"
|
|
required: false
|
|
flag: "-e"
|
|
format: "flag"
|
|
- name: "output"
|
|
type: "string"
|
|
description: "输出文件路径"
|
|
required: false
|
|
flag: "-o"
|
|
format: "flag"
|
|
- name: "additional_args"
|
|
type: "string"
|
|
description: |
|
|
额外的paramspider参数。用于传递未在参数列表中定义的paramspider选项。
|
|
|
|
**示例值：**
|
|
- 根据工具特性添加常用参数示例
|
|
|
|
**注意事项：**
|
|
- 多个参数用空格分隔
|
|
- 确保参数格式正确，避免命令注入
|
|
- 此参数会直接追加到命令末尾
|
|
required: false
|
|
format: "positional"
|