xray
xray copied to clipboard
xpoc如何扫描完整的url呢?
我遇到的问题是在v0.1.0版本不清楚如何去探测完整的URL,我预想是-t http://127.0.0.1/test.html 这个页面下有我所想获取的ID,可以进行下一步传参利用
但是我这样构造却未成功,并且发现会发送两次的test.html都是301-Location,301-X-Pingback,然后才会是真正的GET test.html
name: poc-yaml-test manual: true transport: http rules: r0: request: method: GET path: "{{BaseURL}}" headers: User-Agent: "Mozilla/5.0 (Windows NT 6.3; Trident/7.0; rv:11.0) like Gecko" Referer: "{{BaseURL}}" expression: > response.status == 200 && response.body.bmatches(b'UID":"([a-f0-9]{6,})"') && response.body.bmatches(b'Quit":"([^"]+)"') expression: r0()