Dalfox | XSS e ikemetseng ea Xss

Sengoliloeng sena se tla bua ka sekhechana sa Xs ea Xss sa Xs se bitsoang Dalfox. Babali ba tla ithuta ka menyetla ea lenaneo la ho khetholla khaello tsamaisong ea bofokoli ba marang-rang.

Kenyelletso

Dalfox ke sets'oants'o se potlakileng le se matla sa li-cronner. Ntle le ho fumana mathata a amanang le tlhaselo ea Xss, e boetse e na le likarolo tse ling tsa ho hlahloba mokhoa oa marang-rang bakeng sa SQLI, SSI, e bula tsamaiso. Seketsi se khona ho bona mefuta e fapa-fapaneng ea batšoaruoa ba Xss: "e bontšitsoe", "e bolokiloe" le "e foufetseng".

Ho kenya lesela la dalfox

Ho na le likhetho tse ngata tsa ho kenya lenaneo. E 'ngoe ea litsela tse tummeng haholo ke ho kenya ho sebelisa homebrew.

Ho kenya ho sebelisa Snapraft

Mokhoa ona oa ho kenya o hloka snapraft. Babali ba ka tseba hore na snap e kentsoe tsamaisong ea bona ka ho kenya taelo e khethehileng ("Snop"). Haeba lenaneo le sa thehoa pejana, ho bohlokoa ho fetola khokahano e ka tlase ho e kenya.

Suda Snop Kenya Dalfox

Ho kenya tšebetsong ts'ebetso ea Dalfox u sebelisa mekhoa e 'meli e latelang, mosebelisi o hloka ho sebelisoa ke mofuta oa morao-rao oa puo ea lenaneo. Motho a ka hlahloba mofuta oa puo e kentsoeng o sebelisa taelo ea mofuta oa ho ea. Haeba u e-ea pele e ne e sa kenngoa pele, latela sehokela se ka tlase ho se kenya.

Ho kenya ho tloha mohloling oa pele

Go111Ludule = ho ea Get -v Github.com/hahwul/dalfox/v2

Ho kenya Go le Gityub

Git clone https://ggithuub.com/hahwul/dalfox cd dalfox e ea haha

Ho kenya le Docker

Docker loll Hahwul / Dalfox: Haufi

Babali ba lokela ho kenya taelo ena:

Docker Run -it Hahwlul

Mokhoa o ka tlase o sebetsa feela ho Macos.

Ho kenya le homebrew

Brap tap Hahwul / Dalfox Breaw Kenya Dalfox

Melao-motheo ea mosebetsi Dalfox

Ho lekola url e itseng

Dalfox URL http://testphp.vulweb.com/listproducts.php.

Ho lekola sekhechana sa URL

Dalfox e ka boela ea tšosa li-URL tse ngata ka nako e le 'ngoe.

Katse sampole / Mohlala - Sampole_starget.txt | Dalfox Pipe.

kapa

Faele ea Dalfox ./SSPLES/SSAPLE_Tartget.txt

Mosebelisi a ka sebelisa taelo ea parampeder ea ho batla paramente e itseng, ebe o kenya li-Urels tse ngata ka Dalfox ho fumana sephetho se nepahetseng haholoanyane.

Dalfox | XSS e ikemetseng ea Xss 16237_2

Sephetho

Ho hlakisa, ho loketse ho re ena ke sesebelisoa se potlakileng sa ho batla Xss le litsoi tse ling tse tsebahalang tsa Web tsa marang-rang. Sesebelisoa se fana ka maikutlo a fosahetseng a fosahetseng mme o na le likarolo tse ling tsa ho batla mefuta e fapaneng ea mathata a polokeho ea mathata.

Bohlokoa! Tlhahisoleseling ka sepheo sa lithuto. Ka kopo latela melao 'me u se ke ua sebelisa tlhahisoleseling ena ka sepheo se seng molaong.

Dalfox | XSS e ikemetseng ea Xss

Bala Haholoanyane