mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-07-20 19:00:57 +02:00
公明
69 lines
1.5 KiB
YAML
69 lines
1.5 KiB
YAML
name: "http-intruder"
|
||
command: "ffuf"
|
||
enabled: true
|
||
|
||
short_description: "简单的Intruder（sniper）模糊测试工具"
|
||
|
||
description: |
|
||
简单的Intruder（sniper）模糊测试，逐个参数迭代载荷。
|
||
|
||
**主要功能：**
|
||
- 参数模糊测试
|
||
- 载荷迭代
|
||
- 多种位置支持
|
||
- 批量请求
|
||
|
||
**使用场景：**
|
||
- 参数模糊测试
|
||
- 载荷测试
|
||
- 安全测试
|
||
- 漏洞发现
|
||
|
||
parameters:
|
||
- name: "url"
|
||
type: "string"
|
||
description: "目标URL"
|
||
required: true
|
||
|
||
- name: "method"
|
||
type: "string"
|
||
description: "HTTP方法"
|
||
required: false
|
||
default: "GET"
|
||
|
||
- name: "location"
|
||
type: "string"
|
||
description: "载荷位置（query, body, headers, cookie）"
|
||
required: false
|
||
default: "query"
|
||
|
||
- name: "params"
|
||
type: "string"
|
||
description: "参数列表（JSON格式）"
|
||
required: false
|
||
|
||
- name: "payloads"
|
||
type: "string"
|
||
description: "载荷列表（JSON格式）"
|
||
required: false
|
||
|
||
- name: "max_requests"
|
||
type: "int"
|
||
description: "最大请求数"
|
||
required: false
|
||
default: 100
|
||
|
||
- name: "additional_args"
|
||
type: "string"
|
||
description: |
|
||
额外的http-intruder参数。用于传递未在参数列表中定义的http-intruder选项。
|
||
|
||
**示例值：**
|
||
- 根据工具特性添加常用参数示例
|
||
|
||
**注意事项：**
|
||
- 多个参数用空格分隔
|
||
- 确保参数格式正确，避免命令注入
|
||
- 此参数会直接追加到命令末尾
|
||
required: false
|
||
format: "positional" |