메모 - Githubissues

hahwul / licaner

MIT License

3 stars 0 forks source link

메모 #1

Open hahwul opened 3 years ago

hahwul commented 3 years ago

cache poisoning을 쉽게 탐지하고, 리스크를 만들자
동작 방식은 머릿속에 있는대로..
스펙만 정하자.

Flags

$ licaner [flags]

[ Input flags ]

-url
-pipe
-urls-file
-raw-file

[ output flags ]

-format (line, json)
-output (write to file)

[ config flags ]

-no-cache-busting

Output format (e.g)

$ licaner -url https://www.hahwul.com
[*] Start testing...
[I] This page used cache      [Cache-Key: blahblah]
[*] Testing unkeyed inputs...
[I][reflected header] Found unkeyed input     [Referer: https://example.com]
[I][reflected header] Found unkeyed input     [Origin: example.com
[I][death header] Found unkeyed input         [X-Custom-Header: abcd][500 Internal Error]
...