BevictorΰµÂ

֤ȯ¼ò³Æ£ºBevictorΰµÂ ֤ȯ´úÂ룺002212
È«Ììºò7x24Сʱ·þÎñ£º 400-777-0777

²âÊÔ¹¤¾ß|webÎó²î×Ô¶¯(±»¶¯)ɨÃè

glint ÊÇÒ»¿îgolang¿ª·¢µÄwebÎó²î×Ô¶¯(±»¶¯)ɨÃèÆ÷£¬ÊÇÏÖÔÚΪֹ¸úÉÏÖ÷Á÷ÊÖÒյIJâÊÔ¹¤¾ß

²âÊÔ¹¤¾ß|webÎó²î×Ô¶¯(±»¶¯)ɨÃè

Ðû²¼Ê±¼ä£º2022-07-12
ä¯ÀÀ´ÎÊý£º4144
·ÖÏí£º

ÏîÄ¿×÷Õߣºwrenchonline

ÏîÄ¿µØÖ·£ºhttps://github.com/wrenchonline/glint

Ò»¡¢¹¤¾ßÏÈÈÝ

glint ÊÇÒ»¿îgolang¿ª·¢µÄwebÎó²î×Ô¶¯(±»¶¯)ɨÃèÆ÷£¬ÊÇÏÖÔÚΪֹ¸úÉÏÖ÷Á÷ÊÖÒյIJâÊÔ¹¤¾ß,ÈôÓÐһϹ¦Ð§:

1.xss ASTÓïÒå¼ì²â ÅäºÏä¯ÀÀÆ÷ÅÀ³æÎÛµã¼Í¼¼ì²â»á²âÊÔÌØÊâxss¼ì²â

2.SQL ×¢Èë¼ì²â £¨¸Õ¸ÕÍê³É²¼¶ûÀàÐͼì²â£¬¹ýʧÐͼì²â£¬Öð½¥ÍêÉÆÊ±¼äÐͺÍoob·´Á´¼ì²â£©

3.xray poc ¾ç±¾¼ì²â£¨Õâ¸ö͵ÀÁÖ÷Òª²ÎÕÕ https://github.com/jweny/pocassist )

4.»ùÓÚä¯ÀÀÆ÷µÄÅÀ³æ×Ô¶¯É¨Ãè

5.±»¶¯É¨Ãè

6.csrf ¼ì²â

7.ssrf ¼ì²â £¨ÕýÔÚÖØ¹¹£©

8.jsonp astÓïÒå¼ì²â

9.Xxe ʵÌå×¢Èë¼ì²â Ö§³Ö»ØÏԺͷ´Á´Æ½Ì¨ £¨ÕýÔÚÖØ¹¹£©

10.CRLF ¼ì²â

11.CORS ¿çÓò¹²Ïí¼ì²â

12.Ó¦Ó÷þÎñ¹ýʧ¼ì²â£¨×Ô¶¯£©

13.SSL°æ±¾¼ì²â£¨×Ô¶¯£©

14.cmd webshellºóÃÅ×¢Èë¼ì²â £¨ÕýÔÚÖØ¹¹£©

15.·¾¶´©Ô½¼ì²â

¶þ¡¢×°ÖÃÓëʹÓÃ

1¡¢ÓÉÓÚÆô¶¯Ä£Ê½Éè¼ÆµÃÐí¶à£¬½ÏÁ¿ÔÓÂÒ£¬ÎÒСÎÒ˽¼ÒÍÆ¼öÑо¿Ö°Ô±Ê¹Óñ»¶¯É¨Ãè,¼Ç×Å×°ÉÏchrome

glint.exe --passiveproxy --cert server.pem --key server.key

2¡¢È»ºó»á¼û http://martian.proxy/authority.cer ÏÂÔØÖ¤Êéä¯ÀÀÆ÷µ¼Èë¾ÍÐУ¬ä¯ÀÀÆ÷ÉèÖôúÀí (ÄãµÄ¾ÖÓòÍøip Èç192.168.166.8):8080 £¬¼Ç×ÅÊǾÖÓòÍø²»ÊÇ127,ËäÈ»ÄãÔÚagent.go configure º¯ÊýÖÐÐ޸ġ£

Èý¡¢ÏÂÔØµØÖ·£º

ͨ¹ýÏîÄ¿µØÖ·ÏÂÔØ:https://github.com/wrenchonline/glint

ËÄ¡¢ÉùÃ÷£º

½ö¹©Çå¾²Ñо¿Óëѧϰ֮Óã¬Èô½«¹¤¾ß×öÆäËûÓÃ;£¬ÓÉʹÓÃÕ߼縺ËùÓÐÖ´·¨¼°Á¬´øÔðÈΣ¬×÷Õß²»¼ç¸ºÈκÎÖ´·¨¼°Á¬´øÔðÈΡ£

TOPSEC

Ê®ÄêÊ÷ľ£¬°ÙÄêÊ÷ÈË¡£Î´À´£¬BevictorΰµÂ½«Ê¼ÖÕÆð¾¢Ì½Ë÷£¬Ò»Ö±ÑÓÕ¹ÍøÂçÇå¾²È˲Å×÷ÓýµÄ¿í¶ÈºÍÉî¶È£¬ÎªÍøÂçÇå¾²È˲Å×÷ÓýÓ빤ҵÉú³¤Ð¢Ë³ÆóÒµÁ¦Á¿¡£

Òªº¦´Ê±êÇ©£º
BevictorΰµÂ ÍøÂçÇå¾² ²âÊÔ¹¤¾ß webÎó²î ÉøÍ¸
¿Í»§·þÎñÈÈÏß

400-777-0777
7*24Сʱ·þÎñ

ÁªÏµÓÊÏä

servicing@topsec.com.cn

ɨÂë¹Ø×¢
ÍøÕ¾µØÍ¼