Skip to content
#

waf

Here are 240 public repositories matching this topic...

rubyFeedback
rubyFeedback commented Apr 23, 2019

Hello.

I am currently learning sinatra and am slowly progressing.

Oddly enough I had most progress so far thanks to various videos (I'll not link in
these videos so as to avoid "advertising" for any, but you can definitely find
sinatra videos when you are looking for them).

There is another "logical" step that will come past sinatra - which is to use padrino.
At the least to me this is

python3写的综合扫描工具,主要用来存活验证,敏感文件探测(目录扫描/js泄露接口/html注释泄露),WAF/CDN识别,端口扫描,指纹/服务识别,操作系统识别,POC扫描,SQL注入,绕过CDN,查询旁站等功能,主要用来甲方自测或乙方授权测试,请勿用来搞破坏。

  • Updated Jan 2, 2020
  • Python
akaegi
akaegi commented Jan 23, 2017

In particular I am missing in the docs:

  • Section Synopsis: explain what the effect is of calling waf:exec() in all of access_by_lua, header_filter_by_lua and body_filter_by_lua. why do you need to call waf:exec() in each of them?
  • Section Synopsis: it seems there is an error in log_by_lua. It seems to me it should rather log there and not call exec, as described by https://github.c

一款功能强大的漏洞扫描器,子域名爆破使用aioDNS,asyncio异步快速扫描,覆盖目标全方位资产进行批量漏洞扫描,中间件信息收集,自动收集ip代理,探测Waf信息时自动使用来保护本机真实Ip,在本机Ip被Waf杀死后,自动切换代理Ip进行扫描,Waf信息收集(国内外100+款waf信息)包括安全狗,云锁,阿里云,云盾,腾讯云等,提供部分已知waf bypass 方案,中间件漏洞检测(Thinkphp,weblogic等 CVE-2018-5955,CVE-2018-12613,CVE-2018-11759等),支持SQL注入, XSS, 命令执行,文件包含, ssrf 漏洞扫描, 支持自定义漏洞邮箱推送功能

  • Updated Jan 5, 2020
  • Python

Improve this page

Add a description, image, and links to the waf topic page so that developers can more easily learn about it.

Curate this topic

Add this topic to your repo

To associate your repository with the waf topic, visit your repo's landing page and select "manage topics."

Learn more

You can’t perform that action at this time.