Comments (5)
看了一下源码,type是dns来着,但一直没能检测到就挺纳闷的,是因为网络延迟还是burp版本不匹配?
有对burp的版本要求吗?
我这边用的是burpsuite2021.7来着。
from log4j2scan.
ceye目前就是以dnslog的形式进行监测的,如果发生监测不到的情况,需要确认下ceye的配置是否出现问题,或者目标网络是否block了ceye的相关域名。
from log4j2scan.
block倒是没有,我这边能正常访问API,看样子应该是延迟的问题,burp在发送请求后,还没等ceye那边输出记录就先进行了查询的原因。
emmmm,要不要考虑一下加个字符串组?将所有申请过的前缀放进去,不用filter,改直接读取API内全部记录,然后在本地匹配,匹配到的直接在原字符串组内删除,输出到burp上?
from log4j2scan.
block倒是没有,我这边能正常访问API,看样子应该是延迟的问题,burp在发送请求后,还没等ceye那边输出记录就先进行了查询的原因。
emmmm,要不要考虑一下加个字符串组?将所有申请过的前缀放进去,不用filter,改直接读取API内全部记录,然后在本地匹配,匹配到的直接在原字符串组内删除,输出到burp上?
也可以,未来版本考虑加上该特性
from log4j2scan.
block倒是没有,我这边能正常访问API,看样子应该是延迟的问题,burp在发送请求后,还没等ceye那边输出记录就先进行了查询的原因。 emmmm,要不要考虑一下加个字符串组?将所有申请过的前缀放进去,不用filter,改直接读取API内全部记录,然后在本地匹配,匹配到的直接在原字符串组内删除,输出到burp上?
该机制已在v0.13.1
中加入。
from log4j2scan.
Related Issues (20)
- 建议增加对 JNDIScan支持 HOT 1
- 希望可以填入指定的ip和端口
- 建议添加GoDnslog端口号的选项
- 自定义head头 HOT 2
- 遇到会ceye上出现记录了,但是burp上一直没有显示,会有很长时间的延迟,有时候长有时候短 HOT 2
- 问题 HOT 1
- 已不兼容burpsuite 2022.9.1 HOT 8
- 为什么我设置了revsuit rmi 但是探测仍然是使用的dnslog呢? HOT 3
- 问题 HOT 1
- method GET must not have a request body. HOT 1
- 自定义添加poc HOT 13
- dnslog其他格式
- 导入时报错 HOT 1
- 黑名单机制
- 最新版主被动扫描都无法进行-errors报错如下 HOT 1
- dnslog平台dig.pm加载插件时,获取域名失败 HOT 6
- 目前dig平台已经恢复,但是插件获取dig依然会报错,这个问题在一周多之前已经发现,当时dig是正常的 HOT 1
- 使用了Enable Ex-request选项之后如何看到报文信息哈? HOT 1
- 请作者将此bypass waf poc加入到插件中 ,可以bypasswaf Cloudflare 的waf防护
- 无任何探测请求 HOT 2
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from log4j2scan.