SRC捡漏工具

admin 2023年12月28日01:17:03评论40 views字数 1406阅读4分41秒阅读模式

SRC捡漏工具

        用于模糊 HTTP/1.1 CL.0 请求走私攻击向量的项目。

用法

usage: clzero.py [-h] [-url URL] [-file FILE] [-index INDEX] [-verbose] [-no-color] [-resume] [-skipread] [-quiet] [-lb] [-config CONFIG] [-method METHOD]
CLZero by Moopinger
optional arguments: -h, --help show this help message and exit -url URL (-u), Single target URL. -file FILE (-f), Files containing multiple targets. -index INDEX (-i), Index start point when using a file list. Default is first line. -verbose (-v), Enable verbose output. -no-color Disable colors in HTTP Status -resume Resume scan from last index place. -skipread Skip the read response on smuggle requests, recommended. This will save a lot of time between requests. Ideal for targets with standard HTTP traffic. -quiet (-q), Disable output. Only successful payloads will be written to ./payloads/ -lb Last byte sync method for least request latency. Due to the nature of the request, it cannot guarantee that the smuggle request will be processed first. Ideal for targets with a high amount of traffic, and you do not mind sending multiple requests. -config CONFIG (-c) Config file to load, see ./configs/ to create custom payloads -method METHOD (-m) Method to use when sending the smuggle request. Default: POST


单目标攻击:

python3 clzero.py -u https://www.target.com/ -c configs/default.py -skipreadpython3 clzero.py -u https://www.target.com/ -c configs/default.py -lb

多目标攻击:

python3 clzero.py -l urls.txt -c configs/default.py -skipreadpython3 clzero.py -l urls.txt -c configs/default.py -lb

安装

git clone https://github.com/Moopinger/CLZero.gitcd CLZeropip3 install -r requirements.txt


原文始发于微信公众号(TtTeam):SRC捡漏工具

  • 左青龙
  • 微信扫一扫
  • weinxin
  • 右白虎
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2023年12月28日01:17:03
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                   SRC捡漏工具https://cn-sec.com/archives/2336780.html

发表评论

匿名网友 填写信息