mirror of
https://github.com/Ed1s0nZ/CyberStrikeAI.git
synced 2026-04-21 18:26:38 +02:00
公明
62 lines
1.5 KiB
YAML
62 lines
1.5 KiB
YAML
name: "api-fuzzer"
|
|
command: "ffuf"
|
|
enabled: true
|
|
|
|
short_description: "API端点模糊测试工具，支持智能参数发现"
|
|
|
|
description: |
|
|
高级API端点模糊测试工具，支持智能参数发现和漏洞评估。
|
|
|
|
**主要功能：**
|
|
- API端点发现
|
|
- 参数模糊测试
|
|
- 漏洞评估
|
|
- 多种HTTP方法支持
|
|
|
|
**使用场景：**
|
|
- API安全测试
|
|
- 端点发现
|
|
- 参数测试
|
|
- 安全评估
|
|
|
|
parameters:
|
|
- name: "base_url"
|
|
type: "string"
|
|
description: "API基础URL"
|
|
required: true
|
|
flag: "-u"
|
|
format: "flag"
|
|
|
|
- name: "endpoints"
|
|
type: "string"
|
|
description: "要测试的特定端点（逗号分隔）"
|
|
required: false
|
|
|
|
- name: "methods"
|
|
type: "string"
|
|
description: "HTTP方法（逗号分隔）"
|
|
required: false
|
|
default: "GET,POST,PUT,DELETE"
|
|
|
|
- name: "wordlist"
|
|
type: "string"
|
|
description: "端点发现字典"
|
|
required: false
|
|
default: "/usr/share/wordlists/api/api-endpoints.txt"
|
|
flag: "-w"
|
|
format: "flag"
|
|
|
|
- name: "additional_args"
|
|
type: "string"
|
|
description: |
|
|
额外的api-fuzzer参数。用于传递未在参数列表中定义的api-fuzzer选项。
|
|
|
|
**示例值：**
|
|
- 根据工具特性添加常用参数示例
|
|
|
|
**注意事项：**
|
|
- 多个参数用空格分隔
|
|
- 确保参数格式正确，避免命令注入
|
|
- 此参数会直接追加到命令末尾
|
|
required: false
|
|
format: "positional" |