Skip to content
自动化越权检测PVD
Python
Branch: master
Clone or download
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
Failed to load latest commit information.
Public
README.md
index.py
test.xml

README.md

自动化越权检测 PVD-HACK

强依赖:

  • burpsuite -> Proxy -> HTTP history -> Save items
  • 注意不要勾选:base64-encode requests and responses

参数说明:

  • -w 差异确定字符
  • -f xml文件

实现说明:

特别的:

  • 1.支持POST请求的JSON。
  • 2.不支持异常编码的xml文档
  • 3.还会继续修BUG
  • 4.这是第一版,后续会陆续增加识别率。
You can’t perform that action at this time.