Zer08Bytes

Results 8 issues of Zer08Bytes

请问rules.go中定义的是指纹识别的规则吗? 那么var RuleDatas = []RuleData{ {"宝塔", "body", "(app.bt.cn/static/app.png|安全入口校验失败|入口校验失败|href=\"http://www.bt.cn/bbs)"}, {"深信服防火墙类产品", "code", "(SANGFOR FW)"}, 这个里面的body和code的区别是什么?

Poc目录里搜索 sleep有例子。 ``` name: riskscanner-list-sqli rules: - method: POST path: /resource/list/1/10 headers: Content-Type: application/json;charset=UTF-8 body: "\ {\"sort\":\"1)a union select sleep(5) -- -\"}\r\n\ " expression: | response.status == 200 && response.duration...

比如最新版的是:expression: response.status == 200 && response.body_string.contains("abc") 需要改成response.status == 200 && response.body.bcontains(b'abc') 还有延时也不支持:比如response.latency > 5000 还有格式也需要在原版上修改: 最新的xray的poc格式: ![图片](https://github.com/user-attachments/assets/b1bdea27-5836-47fd-9f0f-62d79b5348d7) 所以最后fscan的格式是: ![图片](https://github.com/user-attachments/assets/d928dc0e-4877-4ab1-9233-8d315e0a1f4c) 能否兼容呢? 实在不兼容,能不能把延时注入的条件response.latency > 5000这个加进去,上面的poc字段改改还好,这个response.latency > 5000没法处理 改成response.duration >=5.0 还是不行 ![图片](https://github.com/user-attachments/assets/38013743-e28c-468c-afe2-06b61652f16c) 虽然不报错,但是检测不出来

Can the bin file converted from donut.exe be restored? I want to restore it to a PE program.

在windows下面运行,出现如下错误 ![图片](https://github.com/user-attachments/assets/84e1d82b-8f5a-4ac8-87cd-f2bef299a4d9)

[bug]开启爆破时,mysql连接失败导致进程退出 ![Image](https://github.com/user-attachments/assets/d4383e50-1180-466d-85ea-1fd5b60db3b9)

缺陷

请问跟frp一样配置socks5怎样配置

enhancement

[17:46:03][!]Extracted Length: 0 at BokuLoader.cna 995 [17:46:03][!] Error extracting reflective loade at BokuLoader.cna:947 # Extract the reflective loader shellcode from .text section of Bokuloader.x64.o $loader = extract_reflective_loader($data); warn("Extracted Length: "...