admin/PrivHunterAI
1
0
Fork 0
mirror of https://github.com/Ed1s0nZ/PrivHunterAI.git synced 2025-09-17 20:41:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update scan.go

Browse Source
This commit is contained in:
公明 2025-02-25 19:35:39 +08:00 committed by GitHub
parent deaa1ea997
commit 7e109c034b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 6 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
scan.go
View File

@ -124,7 +124,7 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
// fmt.Println("Response1 Body:", resp1)
// fmt.Println("Response2 Body:", resp2)
if len(resp1+resp2) < 65535 {
result, err := detectPrivilegeEscalation(AI, r.Request.URL.Path, resp1, resp2)
result, err := detectPrivilegeEscalation(AI, fullURL.String(), resp1, resp2)
if err != nil {
fmt.Println("Error:", err)
return "", "", "", err
@ -140,19 +140,19 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
return `{"res": "white", "reason": "白名单后缀或白名单Content-Type接口"}`, resp1, "", nil
}
func detectPrivilegeEscalation(AI string, path, resp1, resp2 string) (string, error) {
func detectPrivilegeEscalation(AI string, url, resp1, resp2 string) (string, error) {
var result string
var err error
switch AI {
case "kimi":
result, err = aiapis.Kimi(path, resp1, resp2) // 调用 kimi 检测是否越权
result, err = aiapis.Kimi(url, resp1, resp2) // 调用 kimi 检测是否越权
case "deepseek":
result, err = aiapis.DeepSeek(path, resp1, resp2) // 调用 deepSeek 检测是否越权
result, err = aiapis.DeepSeek(url, resp1, resp2) // 调用 deepSeek 检测是否越权
case "qianwen":
result, err = aiapis.Qianwen(path, resp1, resp2) // 调用 qianwen 检测是否越权
result, err = aiapis.Qianwen(url, resp1, resp2) // 调用 qianwen 检测是否越权
default:
result, err = aiapis.Kimi(path, resp1, resp2) // 默认调用 kimi 检测是否越权
result, err = aiapis.Kimi(url, resp1, resp2) // 默认调用 kimi 检测是否越权
}
if err != nil {