自己动手写waf指纹识别

发布时间：2020-12-14 06:13:23 所属栏目：百科来源：网络整理

导读：1 import requests 2 import re 3 def target_url(scan_url): 4 xssstring = ‘ scriptalert(1)/script ‘ 5 response = requests.get(scan_url) 6 head = response.headers 7 # print(head) 8 # print(head.values()) 9 for i in head.values(): 10 if re.s

 1 import requests
 2 import re
 3 def target_url(scan_url):
 4     xssstring = ‘<script>alert(1)</script>‘
 5     response = requests.get(scan_url)
 6     head = response.headers
 7     #print(head)
 8     #print(head.values())
 9     for i in head.values():
10         if re.search(‘.*__jsluid‘,i):
11             print(scan_url+‘:该网站用的知道创宇家的waf‘)
12             return
13 if __name__ == ‘__main__‘:
14     scan_url=input("请输入网址:")
15     target_url(scan_url)

简单的说就是想办法让目标域名告警，正则匹配响应包里的关键词

（编辑：李大同）

【声明】本站内容均来自网络，其相关言论仅代表作者个人观点，不代表本站立场。若无意侵犯到您的权利，请及时与联系站长删除相关内容!