j4vaovo commented 1 year ago

测试目标

指纹的Yaml规则

name: ruby-on-rails
priority: 3
nuclei_tags:
 - - rails
fingerprint:
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword:
     - content="Ruby on Rails
   favicon_hash: []
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword:
     - alt="Ruby on Rails
   favicon_hash: []
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword:
     - <title>Ruby on Rails</title>
   favicon_hash: []

github-actions[bot] commented 1 year ago

验证过程:

点击展开查看

```bash URL: [38;5;10mhttps://nine-god.com/[39m HEADERS: server: nginx/1.14.0 date: Sun, 30 Apr 2023 22:14:04 GMT content-type: text/html; charset=utf-8 transfer-encoding: chunked connection: keep-alive x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff etag: W/"52254142d3ced1eac2f69a86764f9b01" cache-control: max-age=0, private, must-revalidate set-cookie: _blog_session=SU40VE1iZnVLZUd1aGlGSGx5MDlMVWVpTTYvb2g3VnJ1di9jcnBhVzFJV3hyQVJWQTI5Q1l2cGZ3MkV1cnQ3dEJ0ZzEzUmZNNjIxQmZTVGxzbWVCSlBvekh1OFZTekl5cUZMc3VRL2hNV1huRDNhdE11c1dQMldyZFRjUUtUdUUzcnVlSFRqamJRNldnMGsyNWltQ293PT0tLTVQUVVYOVlYajdJa3hNbmVOOUhiQ1E9PQ%3D%3D--3b2803aa1aca03da28a25da09508d4b2b8624174; path=/; HttpOnly x-request-id: 590764b2-cdc4-40a9-8065-aeaf834709a7 x-runtime: 0.003996 STATUS_CODE: 200 TEXT: 九神小屋

欢迎来到九神小屋！

rails version:5.1.6
ruby version: 2.4.1 (x86_64-linux)

[38;5;9mFAVICON: { "https://nine-god.com/assets/favicon-16b74402d6ab02cab8a835c8bf639f65933b4ff5ededa99427103ff6e7d10efe.ico": "b3545bf6d1caf53f2e151c771396e30d", "https://nine-god.com/favicon.ico": "b3545bf6d1caf53f2e151c771396e30d", }[39m Matching fingerprintV3WebFingerPrint { name: "ruby-on-rails", priority: 3, request: WebFingerPrintRequest { path: "/", request_method: "get", request_headers: {}, request_data: "", }, match_rules: WebFingerPrintMatch { status_code: 0, favicon_hash: [], headers: {}, keyword: [ "alt=\"Ruby on Rails", ], }, } ```

验证结果：

是否识别成功： true