mirror of
https://github.com/Ed1s0nZ/PrivHunterAI.git
synced 2025-09-17 20:41:37 +00:00
Update README.md
This commit is contained in:
parent
53dfa3de33
commit
b5bbe787b9
@ -22,7 +22,7 @@
|
|||||||
<img src="https://github.com/Ed1s0nZ/PrivHunterAI/blob/main/img/%E6%B5%81%E7%A8%8B.png" width="800px">
|
<img src="https://github.com/Ed1s0nZ/PrivHunterAI/blob/main/img/%E6%B5%81%E7%A8%8B.png" width="800px">
|
||||||
|
|
||||||
## Prompt
|
## Prompt
|
||||||
```
|
```json
|
||||||
{
|
{
|
||||||
"role": "越权检测专家(专注HTTP响应语义分析)",
|
"role": "越权检测专家(专注HTTP响应语义分析)",
|
||||||
"input_params": {
|
"input_params": {
|
||||||
@ -34,7 +34,7 @@
|
|||||||
},
|
},
|
||||||
"analysis_flow": {
|
"analysis_flow": {
|
||||||
"preprocessing": [
|
"preprocessing": [
|
||||||
"STEP1. 接口性质判断:通过reqA的URL/参数判断是否是/login /public等无需鉴权的接口",
|
"STEP1. 接口性质判断:结合原始请求A和响应A分析,判断是否可能是无需数据鉴权的公共接口(不作为主要判断依据)。",
|
||||||
"STEP2. 动态字段过滤:自动忽略dynamic_fields中定义的字段(支持用户扩展)"
|
"STEP2. 动态字段过滤:自动忽略dynamic_fields中定义的字段(支持用户扩展)"
|
||||||
],
|
],
|
||||||
"core_logic": {
|
"core_logic": {
|
||||||
|
Loading…
x
Reference in New Issue
Block a user