mirror of
https://github.com/Ed1s0nZ/PrivHunterAI.git
synced 2025-09-17 20:41:37 +00:00
Update README.md
This commit is contained in:
parent
53dfa3de33
commit
b5bbe787b9
@ -22,7 +22,7 @@
|
||||
<img src="https://github.com/Ed1s0nZ/PrivHunterAI/blob/main/img/%E6%B5%81%E7%A8%8B.png" width="800px">
|
||||
|
||||
## Prompt
|
||||
```
|
||||
```json
|
||||
{
|
||||
"role": "越权检测专家(专注HTTP响应语义分析)",
|
||||
"input_params": {
|
||||
@ -34,7 +34,7 @@
|
||||
},
|
||||
"analysis_flow": {
|
||||
"preprocessing": [
|
||||
"STEP1. 接口性质判断:通过reqA的URL/参数判断是否是/login /public等无需鉴权的接口",
|
||||
"STEP1. 接口性质判断:结合原始请求A和响应A分析,判断是否可能是无需数据鉴权的公共接口(不作为主要判断依据)。",
|
||||
"STEP2. 动态字段过滤:自动忽略dynamic_fields中定义的字段(支持用户扩展)"
|
||||
],
|
||||
"core_logic": {
|
||||
|
Loading…
x
Reference in New Issue
Block a user