-
-
Notifications
You must be signed in to change notification settings - Fork 230
添加及优化指纹 #210
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
base: main
Are you sure you want to change the base?
添加及优化指纹 #210
Conversation
|
规则里默认就是忽略大小写,or匹配的,字符串有没有单引号括起来都是一样,新添加的有测试地址吗 |
|
大小写这个是改了吗,我看README里写的是 case-insensitive | bool | 是否忽略大小写,默认为false bladex.yaml 47.111.103.162:8088 |
|
指纹在提交之后会格式化,会自动转小写和忽略大小写,把这个特殊路径删除了吧 - method: GET
path:
- '{{BaseURL}}/api'
matchers:
- type: word
words:
- "No handler found for GET /"
- "No endpoint GET /."
- "Failed to handle request"
condition: or
part: body
case-insensitive: true
- method: GET
path:
- '{{BaseURL}}/gateway'
matchers:
- type: word
words:
- "No handler found for GET /"
- "No endpoint GET /."
- "Failed to handle request"
condition: or
part: body
case-insensitive: 而且这几个关键词太常见了,其他网站也会有这些关键词,就会导致其他网站被识别为bladex |
不会的,是这个框架的特征,我优化处理过了的。路径的问题是因为有些站访问根路径特征出不来,/api和/gateway才会带特征 |
|
/路径可能为前端或者后端的api接口,/api和/gateway是后端api接口。/的我把前端后端的识别都加上了,/api和/gateway考虑了版本的差异 |
|
你没懂我的意思,你访问一下 https://fofa.info/result?qbase64=RmFpbGVkIHRvIGhhbmRsZSByZXF1ZXN0 |
考虑过的,正常springboot的是长这样,没有命中规则 |
No description provided.