Documentation
¶
Index ¶
- func CheckConfig() error
- func Run() error
- type APIInfo
- type CandidateURL
- type CrawlTask
- type Crawler
- type FuzzTask
- type Fuzzer
- type ParamFuzzer
- type PermissionChecker
- func NewAuthorityChecker(urls []string) *PermissionChecker
- func NewPermissionChecker(lowAuthClient, highAuthClient *util.HTTPClient, urls []string) *PermissionChecker
- func NewPrivilegeEscalationChecker(lowAuthClient, highAuthClient *util.HTTPClient, urls []string) *PermissionChecker
- func NewUnauthorityChecker(client *util.HTTPClient, urls []string) *PermissionChecker
- func (pc *PermissionChecker) CheckAuthority() error
- func (pc *PermissionChecker) CheckPrivilegeEscalation()
- func (pc *PermissionChecker) CheckUnauthority() error
- func (pc *PermissionChecker) GetAuthorityResults() []mode.AuthorityResult
- func (pc *PermissionChecker) GetPrivilegeEscalationResults() []mode.PrivilegeEscalationResult
- func (pc *PermissionChecker) GetResults() []mode.AuthorityResult
- func (pc *PermissionChecker) GetUnauthorityResults() []mode.UnauthorityResult
- type TestURL
Constants ¶
This section is empty.
Variables ¶
This section is empty.
Functions ¶
Types ¶
type CandidateURL ¶
type CandidateURL struct {
URL string
Method string
StatusCode int
Content string
ErrorHints []string
}
CandidateURL 候选URL结构
type Crawler ¶
type Crawler struct {
HTTPClient *util.HTTPClient // HTTP客户端
Visited map[string]bool // 已访问的URL记录
JSFiles []mode.JSFile // 发现的JS文件列表
JSFileCheck map[string]struct{} // JS文件查重
Links []mode.Link // 发现的链接列表
LinkCheck map[string]struct{} // Link查重
SensitiveInfo []mode.Info // 提取的敏感信息
SensitiveCheck map[string]struct{} // 敏感信息查重
FuzzResults []mode.FuzzResult // 模糊测试结果
DomainInfo []mode.DomainInfo // 域名信息
DomainCheck map[string]struct{} // 域名查重
IpCheck map[string]struct{} // IP查重
ParamFuzzResults []mode.ParamFuzzResult // 参数模糊测试结果
Depth int // 当前爬取深度
MaxDepth int // 最大爬取深度
BaseURL string // 基础URL
Domain string // 目标域名
LinkConcurrency int // 链接爬取并发数
JSConcurrency int // JS文件获取并发数
// contains filtered or unexported fields
}
Crawler 网页爬虫结构体,负责爬取网页内容并提取敏感信息
func NewCrawler ¶
NewCrawler 创建新的爬虫实例
func (*Crawler) AddFuzzResult ¶
func (c *Crawler) AddFuzzResult(result mode.FuzzResult)
AddFuzzResult 添加模糊测试结果
func (*Crawler) GetResults ¶
func (c *Crawler) GetResults() ([]mode.JSFile, []mode.Link, []mode.Info, []mode.FuzzResult, []mode.DomainInfo)
GetResults 获取爬取结果
type FuzzTask ¶
type FuzzTask struct {
URL string
Method string
Source string
Original string
Payload string
FuzzType string
}
FuzzTask 模糊测试任务
type Fuzzer ¶
type Fuzzer struct {
HTTPClient *util.HTTPClient // HTTP客户端
BaseURL string // 基础URL
Crawler *Crawler // 爬虫实例
BaseDir string // 基础目录
}
Fuzzer 模糊测试器
type ParamFuzzer ¶
type ParamFuzzer struct {
HTTPClient *util.HTTPClient
Crawler *Crawler
BaseURL string
Results []mode.ParamFuzzResult
}
ParamFuzzer 参数模糊测试器
func NewParamFuzzer ¶
func NewParamFuzzer(baseURL string, crawler *Crawler) *ParamFuzzer
NewParamFuzzer 创建新的参数模糊测试器
func (*ParamFuzzer) GetResults ¶
func (pf *ParamFuzzer) GetResults() []mode.ParamFuzzResult
GetResults 获取参数模糊测试结果
func (*ParamFuzzer) StartParamFuzzing ¶
func (pf *ParamFuzzer) StartParamFuzzing() error
StartParamFuzzing 开始参数模糊测试
type PermissionChecker ¶
type PermissionChecker struct {
LowAuthClient *util.HTTPClient // 低权限HTTP客户端
HighAuthClient *util.HTTPClient // 高权限HTTP客户端
NoAuthClient *util.HTTPClient // 无认证HTTP客户端
TargetURLs []string // 目标URL列表
AuthorityResults []mode.AuthorityResult // 权限检测结果
PrivilegeEscalationResults []mode.PrivilegeEscalationResult // 未授权访问检测结果
}
PermissionChecker 统一的权限检测器,支持多种权限检测模式
func NewAuthorityChecker ¶
func NewAuthorityChecker(urls []string) *PermissionChecker
NewAuthorityChecker 创建权限检测器(向后兼容)
func NewPermissionChecker ¶
func NewPermissionChecker(lowAuthClient, highAuthClient *util.HTTPClient, urls []string) *PermissionChecker
NewPermissionChecker 创建统一权限检测器
func NewPrivilegeEscalationChecker ¶
func NewPrivilegeEscalationChecker(lowAuthClient, highAuthClient *util.HTTPClient, urls []string) *PermissionChecker
NewPrivilegeEscalationChecker 创建未授权访问检测器(向后兼容)
func NewUnauthorityChecker ¶
func NewUnauthorityChecker(client *util.HTTPClient, urls []string) *PermissionChecker
NewUnauthorityChecker 创建未授权访问检测器(向后兼容)
func (*PermissionChecker) CheckAuthority ¶
func (pc *PermissionChecker) CheckAuthority() error
CheckAuthority 检测权限
func (*PermissionChecker) CheckPrivilegeEscalation ¶
func (pc *PermissionChecker) CheckPrivilegeEscalation()
CheckPrivilegeEscalation 执行未授权访问检测
func (*PermissionChecker) CheckUnauthority ¶
func (pc *PermissionChecker) CheckUnauthority() error
CheckUnauthority 检测未授权访问
func (*PermissionChecker) GetAuthorityResults ¶
func (pc *PermissionChecker) GetAuthorityResults() []mode.AuthorityResult
GetAuthorityResults 获取权限检测结果
func (*PermissionChecker) GetPrivilegeEscalationResults ¶
func (pc *PermissionChecker) GetPrivilegeEscalationResults() []mode.PrivilegeEscalationResult
GetPrivilegeEscalationResults 获取未授权访问检测结果
func (*PermissionChecker) GetResults ¶
func (pc *PermissionChecker) GetResults() []mode.AuthorityResult
GetResults 获取权限检测结果(向后兼容)
func (*PermissionChecker) GetUnauthorityResults ¶
func (pc *PermissionChecker) GetUnauthorityResults() []mode.UnauthorityResult
GetUnauthorityResults 获取未授权访问检测结果
Click to show internal directories.
Click to hide internal directories.