chasingboy
chasingboy
## Reflective Cross Site Scripting at info.php 1. I found that at line 50 of backend/common/system/info.php, Receive parameters without any filtering at `$_SERVER['HTTP_USER_AGENT']`.  2. This is an official demo...
Hello, When I use multithreading, the runtime prints duplicate results. ``` import threading, queue from alive_progress import alive_bar import time q = queue.Queue() for url in range(1000): q.put(url) def requester(url):...
There is a small demand, can you increase the output web title option like httpx tool(-title). thanks!
1、Download source code audit，It was found that the date parameter in the post.php file was not filtered during output. ```php # line 245 function goto_page(e) { var evt = e...
1. We enter the management page, Go to website settings.  2. Next, I want to inject php code by modifying these settings. From the config.php file we found that...
Output duplicate results when searching with Fofa engine ``` # cmd root$ echo 'ip="36.189.1.1/16" && port="22"' | uncover -e fofa -l 1000 __ ______ _________ _ _____ _____ / /...