TheftFuzzer是一种工具,可以模拟跨源资源共享CORS实现中常见的错误配置
TheftFuzzer是一种工具,可以模拟跨源资源共享CORS实现中常见的错误配置
Python 其它杂项
共215Star
详细介绍
┌┬┐┬ ┬┌─┐┌─┐┌┬┐┌─┐┬ ┬┌─┐┌─┐┌─┐┬─┐
│ ├─┤├┤ ├┤ │ ├┤ │ │┌─┘┌─┘├┤ ├┬┘
┴ ┴ ┴└─┘└ ┴ └ └─┘└─┘└─┘└─┘┴└─
Introduction:
TheftFuzzer is a tool that fuzzes Cross-Origin Resource Sharing implementations for common misconfigurations.
Usage:
python theftfuzzer.py -d 'http://example.com/api/data'
Help:
python theftfuzzer.py -h
~$ python theftfuzzer.py -h
usage: theftfuzzer.py [-h] -d DOMAIN [-c COOKIE]
Cross Origin Resource Sharing Fuzzer by Corben Leo
optional arguments:
-h, --help show this help message and exit
-d DOMAIN, --domain DOMAIN
URL / Target to fuzz
-c COOKIE, --cookie COOKIE
File containing cookie to send in fuzzing requests