-
2021 OWASP Top 10 #1 - 访问控制中断 -
2021 OWASP Top 10 #7 - 身份验证失效 -
2023 OWASP API Top 10 #1 - 对象级别授权中断 -
2023 OWASP API Top 10 #2 - 身份验证失效 -
2023 OWASP API Top 10 #5 - 功能级别授权中断 -
2023 CWE Top 25 #11 - CWE-862: 缺少授权 -
2023 CWE Top 25 #13 - CWE-287: 不正确的身份验证 -
2023 CWE Top 25 #20 - CWE-306: 关键功能缺少身份验证 -
2023 CWE Top 25 #24 - CWE-863: 不正确的授权
-
Python: Django (django, django-rest-framework), Flask (flask), Sanic (sanic) -
PHP: Laravel (laravel), Symfony (symfony), CakePHP (cakephp) -
Ruby: Rails* (rails), Grape (grape) -
Java: JAX-RS (jax-rs), Spring (spring) -
Go: Gorilla (gorilla), Gin (gin), Chi (chi) -
JavaScript/TypeScript: Express (express), React (react), Angular (angular)
git clone https://github.com/mschwager/route-detect.git$ python -m pip install --upgrade route-detect$ echo 'print(1 == 1)' | semgrep --config $(routes which test-route-detect) -Scanning 1 file.Findings: /tmp/stdin routes.rules.test-route-detect Found '1 == 1', your route-detect installation is working correctly 1┆ print(1 == 1)Ran 1 rule on 1 file: 1 finding. semgrep --config $(routes which django) path/to/django/code semgrep --json --config $(routes which django) --output routes.json path/to/django/code$ routes viz --browser routes.json semgrep --json --config $(routes which all) --output routes.json path/to/code cp $(routes which django) my-django.yml semgrep --json --config my-django.yml --output routes.json path/to/django/code$ routes viz --browser routes.json
原文始发于微信公众号（FreeBuf）：如何使用route-detect在Web应用程序路由中扫描身份认证和授权漏洞
免责声明:文章中涉及的程序(方法)可能带有攻击性，仅供安全研究与教学之用，读者将其信息做其他用途，由读者承担全部法律及连带责任，本站不承担任何法律及连带责任；如有问题可邮件联系(建议使用企业邮箱或有效邮箱,避免邮件被拦截，联系方式见首页)，望知悉。
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论