ׯÏÐÓÎÏ·

֤ȯ¼ò³Æ£º×¯ÏÐÓÎÏ· ֤ȯ´úÂ룺002212
È«Ììºò7x24СʱЧÀÍ£º 400-777-0777
Çå¾²ÔÆÐ§ÀÍ

²âÊÔ¹¤¾ß|webÎó²î×Ô¶¯(±»¶¯)ɨÃè

glint ÊÇÒ»¿îgolang¿ª·¢µÄwebÎó²î×Ô¶¯(±»¶¯)ɨÃèÆ÷£¬£¬ÊÇÏÖÔÚΪֹ¸úÉÏÖ÷Á÷ÊÖÒյIJâÊÔ¹¤¾ß

²âÊÔ¹¤¾ß|webÎó²î×Ô¶¯(±»¶¯)ɨÃè

Ðû²¼Ê±¼ä£º2022-07-12
ä¯ÀÀ´ÎÊý£º3676
·ÖÏí£º

ÏîÄ¿×÷Õߣºwrenchonline

ÏîÄ¿µØµã£ºhttps://github.com/wrenchonline/glint

Ò»¡¢¹¤¾ßÏÈÈÝ

glint ÊÇÒ»¿îgolang¿ª·¢µÄwebÎó²î×Ô¶¯(±»¶¯)ɨÃèÆ÷£¬£¬ÊÇÏÖÔÚΪֹ¸úÉÏÖ÷Á÷ÊÖÒյIJâÊÔ¹¤¾ß,ÈôÓÐһϹ¦Ð§:

1.xss ASTÓïÒå¼ì²â ÅäºÏä¯ÀÀÆ÷ÅÀ³æÎÛµã¼Í¼¼ì²â»á²âÊÔÌØÊâxss¼ì²â

2.SQL ×¢Èë¼ì²â £¨¸Õ¸ÕÍê³É²¼¶ûÀàÐͼì²â£¬£¬¹ýʧÐͼì²â£¬£¬Öð½¥ÍêÉÆÊ±¼äÐͺÍoob·´Á´¼ì²â£©

3.xray poc ¾ç±¾¼ì²â£¨Õâ¸ö͵ÀÁÖ÷Òª²ÎÕÕ https://github.com/jweny/pocassist )

4.»ùÓÚä¯ÀÀÆ÷µÄÅÀ³æ×Ô¶¯É¨Ãè

5.±»¶¯É¨Ãè

6.csrf ¼ì²â

7.ssrf ¼ì²â £¨ÕýÔÚÖØ¹¹£©

8.jsonp astÓïÒå¼ì²â

9.Xxe ʵÌå×¢Èë¼ì²â Ö§³Ö»ØÏԺͷ´Á´Æ½Ì¨ £¨ÕýÔÚÖØ¹¹£©

10.CRLF ¼ì²â

11.CORS ¿çÓò¹²Ïí¼ì²â

12.Ó¦ÓÃЧÀ͹ýʧ¼ì²â£¨×Ô¶¯£©

13.SSL°æ±¾¼ì²â£¨×Ô¶¯£©

14.cmd webshellºóÃÅ×¢Èë¼ì²â £¨ÕýÔÚÖØ¹¹£©

15.·¾¶´©Ô½¼ì²â

¶þ¡¢×°ÖÃÓëʹÓÃ

1¡¢ÓÉÓÚÆô¶¯Ä£Ê½Éè¼ÆµÃÐí¶à£¬£¬½ÏÁ¿ÔÓÂÒ£¬£¬ÎÒСÎÒ˽¼ÒÍÆ¼öÑо¿Ö°Ô±Ê¹Óñ»¶¯É¨Ãè,¼Ç×Å×°ÉÏchrome

glint.exe --passiveproxy --cert server.pem --key server.key

2¡¢È»ºó»á¼û http://martian.proxy/authority.cer ÏÂÔØÖ¤Êéä¯ÀÀÆ÷µ¼Èë¾ÍÐУ¬£¬ä¯ÀÀÆ÷ÉèÖÃÊðÀí (ÄãµÄ¾ÖÓòÍøip Èç192.168.166.8):8080 £¬£¬¼Ç×ÅÊǾÖÓòÍø²»ÊÇ127,ËäÈ»ÄãÔÚagent.go configure º¯ÊýÖÐÐ޸ġ£¡£¡£

Èý¡¢ÏÂÔØµØµã£º

ͨ¹ýÏîÄ¿µØµãÏÂÔØ:https://github.com/wrenchonline/glint

ËÄ¡¢ÉùÃ÷£º

½ö¹©Çå¾²Ñо¿Óëѧϰ֮Ó㬣¬Èô½«¹¤¾ß×öÆäËûÓÃ;£¬£¬ÓÉʹÓÃÕ߼縺ËùÓÐÖ´·¨¼°Á¬´øÔðÈΣ¬£¬×÷Õß²»¼ç¸ºÈκÎÖ´·¨¼°Á¬´øÔðÈΡ£¡£¡£

TOPSEC

Ê®ÄêÊ÷ľ£¬£¬°ÙÄêÊ÷ÈË¡£¡£¡£Î´À´£¬£¬×¯ÏÐÓÎÏ·½«Ê¼ÖÕÆð¾¢Ì½Ë÷£¬£¬Ò»Ö±ÑÓÕ¹ÍøÂçÇå¾²È˲Å×÷ÓýµÄ¿í¶ÈºÍÉî¶È£¬£¬ÎªÍøÂçÇå¾²È˲Å×÷ÓýÓ빤ҵÉú³¤Ð¢Ë³ÆóҵʵÁ¦¡£¡£¡£

Òªº¦´Ê±êÇ©£º
ׯÏÐÓÎÏ· ÍøÂçÇå¾² ²âÊÔ¹¤¾ß webÎó²î ÉøÍ¸
¿Í»§Ð§ÀÍÈÈÏß

400-777-0777
7*24СʱЧÀÍ

ÁªÏµÓÊÏä

servicing@topsec.com.cn

ɨÂë¹Ø×¢
¡¾ÍøÕ¾µØÍ¼¡¿¡¾sitemap¡¿