Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

指纹库匹配时区分大小写会导致很多特征无法识别 #129

Open
alamo21 opened this issue Feb 2, 2023 · 2 comments
Open

指纹库匹配时区分大小写会导致很多特征无法识别 #129

alamo21 opened this issue Feb 2, 2023 · 2 comments
Labels
bug Something isn't working

Comments

@alamo21
Copy link

alamo21 commented Feb 2, 2023

大佬好,感谢分享工具!

在测试的过程中发现指纹库的识别似乎区分了大小写,在实际使用时经常会看到Server: nginx这种header,但是指纹库里因为是Nginx Response="server: nginx",就会导致无法识别,另外还有Ruby-on-Rails Body="alt="ruby on rails" "这条指纹,像vulhub中的CVE-2018-3760环境启动的rails是Ruby on Rails,就会识别不出来。

@lcvvvv
Copy link
Owner

lcvvvv commented Feb 7, 2023

确实有这个问题,在优化中

@lcvvvv lcvvvv added the bug Something isn't working label Feb 7, 2023
@alamo21
Copy link
Author

alamo21 commented Feb 17, 2023

确实有这个问题,在优化中

感谢大佬的回复!

顺便也有一个小建议,程序有判断端口是http或者是https的功能,有很多端口在使用http协议访问的时候,会回复一个“his combination of host and port requires TLS”或者“HTTP request to an HTTPS server”,看起来也是200,但实际没什么用处。建议在判定http还是https的时候加一下类似上面的判断条件更好一些。比如说这个:"URL": "http://67.23.242.188:8001","Body": "Bad Request\r\nThis combination of host and port requires TLS.\r\n";其实他是有goanywhere,但在指纹库里加上goanywhere Body="goanywhere/javax.faces" 也是识别不出来的。

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something isn't working
Projects
None yet
Development

No branches or pull requests

2 participants