admin/PrivHunterAI
1
0
Fork 0
mirror of https://github.com/Ed1s0nZ/PrivHunterAI.git synced 2025-05-08 03:27:10 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update scan.go

Browse Source
This commit is contained in:
公明 2025-03-03 11:27:16 +08:00 committed by GitHub
parent a732af55c7
commit 5184c53628
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 23 additions and 19 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

42
scan.go
View File

@ -123,7 +123,7 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
Path: r.Request.URL.Path, Path: r.Request.URL.Path,
RawQuery: r.Request.URL.RawQuery, RawQuery: r.Request.URL.RawQuery,
} }
fmt.Println(fullURL)
if isNotSuffix(r.Request.URL.Path, config.GetConfig().Suffixes) && !containsString(r.Response.Header.Get("Content-Type"), config.GetConfig().AllowedRespHeaders) { if isNotSuffix(r.Request.URL.Path, config.GetConfig().Suffixes) && !containsString(r.Response.Header.Get("Content-Type"), config.GetConfig().AllowedRespHeaders) {
req, err := http.NewRequest(r.Request.Method, fullURL.String(), strings.NewReader(string(r.Request.Body))) req, err := http.NewRequest(r.Request.Method, fullURL.String(), strings.NewReader(string(r.Request.Body)))
@ -157,27 +157,31 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
resp2 := string(bodyBytes) resp2 := string(bodyBytes)
if len(resp1+resp2) < 65535 { if len(resp1+resp2) < 65535 {
if !MatchString(config.GetConfig().RespBodyBWhiteList, resp2) {
// 初始值 // 初始值
var resultDetect string var resultDetect string
var detectErr error var detectErr error
maxRetries := 5 maxRetries := 5
for i := 0; i < maxRetries; i++ { for i := 0; i < maxRetries; i++ {
resultDetect, detectErr = detectPrivilegeEscalation(config.GetConfig().AI, req1, resp1, resp2, resp.Status) resultDetect, detectErr = detectPrivilegeEscalation(config.GetConfig().AI, req1, resp1, resp2, resp.Status)
if detectErr == nil { if detectErr == nil {
break // 成功退出循环 break // 成功退出循环
}
// 可选：增加延迟避免频繁请求
fmt.Println("AI分析异常，重试中，异常原因：", detectErr)
time.Sleep(5 * time.Second) // 1秒延迟
} }
// 可选：增加延迟避免频繁请求
fmt.Println("AI分析异常，重试中，异常原因：", detectErr) if detectErr != nil {
time.Sleep(5 * time.Second) // 1秒延迟 fmt.Println("Error after retries:", detectErr)
return "", "", "", detectErr
}
return resultDetect, resp1, resp2, nil
} else {
return `{"res": "false", "reason": "匹配到关键字，判断为无越权（未消耗AI tokens）"}`, resp1, resp2, nil
} }
if detectErr != nil {
fmt.Println("Error after retries:", detectErr)
return "", "", "", detectErr
}
return resultDetect, resp1, resp2, nil
} else { } else {
return `{"res": "white", "reason": "请求包太大"}`, resp1, resp2, nil return `{"res": "white", "reason": "请求包太大"}`, resp1, resp2, nil
} }