Skip to content

Commit

Permalink
增加新增选项的描述
Browse files Browse the repository at this point in the history
  • Loading branch information
ttstormxx committed Jul 15, 2023
1 parent d887473 commit d12d495
Showing 1 changed file with 20 additions and 15 deletions.
35 changes: 20 additions & 15 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -12,35 +12,40 @@ python3.8
安装依赖:

`pip3 install -r requirements.txt`
### 快捷命令

`alias jjjjjjjjjjjjjs='python3 jjjjjjjjjjjjjs.py'`

### 使用方式
```
使用方式:python3 jjjjjjjs.py url|urlfile [fuzz|api] [noapi] [nobody|nofuzz] [cookie] [header] [danger] [bypass] [thread]
使用方式:python3 jjjjjjjs.py url|urlfile [fuzz|api] [noapi] [nobody|nofuzz] [cookie] [header] [danger] [bypass] [output] [thread] [proxy] [flush]
url|file: 目标url
fuzz: 自动fuzz接口
api: 用户指定api根路径 fuzz|api e.g. api=/jeecg-boot
noapi: 排除输入的指定api e.g. noapi=/system,/worker,/api
url|file:目标url
nobody: 禁用输出响应body nobody|nofuzz
fuzz:自动fuzz接口
nofuzz: 仅获取有效api,无后续响应获取
api:用户指定api根路径 fuzz|api eg. api=/jeecg-boot
cookie: 设置cookie e.g. cookie='username=admin'
noapi:排除输入的指定api eg. noapi=/system,/worker,/api
header: 设置header e.g. header='X-Forwarded-For: localhost\\nX-Access-Token: eyJxxxxx'
nobody: 禁用输出响应body nobody|nofuzz
danger: 解除危险接口限制
nofuzz: 仅获取有效api,无后续响应获取
bypass: 对500 401 403 进行bypass测试
cookie: 设置cookie(爬取阶段和响应获取阶段)eg. cookie='username=admin'
output: 输出到文件 (txt)
header: 设置header(爬取阶段和响应获取阶段)eg. header='X-Forwarded-For: localhost\nX-Access-Token: eyJxxxxx'
thread: 线程数 e.g. thread=200
danger: 解除危险接口限制
proxy: 设置代理 (仅指定proxy时,自动设置代理到http://127.0.0.1:8080) e.g. proxy='http://127.0.0.1:8080'
bypass: 对500 401 403 进行bypass测试(bypass模式响应获取阶段会忽略cookie和header)
flush: 清除项目历史记录,重新爬取
thread: 线程数(爬取阶段和响应获取阶段)eg. thread=200
目标参数的位置固定在参数第一位,其他参数不限制出现位置
```
> 注意: 目标参数的位置固定在参数第一位,其他参数不限制出现位置
Expand Down

0 comments on commit d12d495

Please sign in to comment.