Update scan.go

This commit is contained in:
公明 2025-02-27 10:07:35 +08:00 committed by GitHub
parent eccaae7045
commit cc8be2845b
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -10,6 +10,7 @@ import (
"strings" "strings"
"time" "time"
aiapis "yuequanScan/AIAPIS" aiapis "yuequanScan/AIAPIS"
"yuequanScan/config"
) )
type Result struct { type Result struct {
@ -115,14 +116,14 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
RawQuery: r.Request.URL.RawQuery, RawQuery: r.Request.URL.RawQuery,
} }
if isNotSuffix(r.Request.URL.Path, suffixes) && !containsString(r.Response.Header.Get("Content-Type"), allowedRespHeaders) { if isNotSuffix(r.Request.URL.Path, config.GetConfig().Suffixes) && !containsString(r.Response.Header.Get("Content-Type"), config.GetConfig().AllowedRespHeaders) {
req, err := http.NewRequest(r.Request.Method, fullURL.String(), strings.NewReader(string(r.Request.Body))) req, err := http.NewRequest(r.Request.Method, fullURL.String(), strings.NewReader(string(r.Request.Body)))
if err != nil { if err != nil {
fmt.Println("创建请求失败:", err) fmt.Println("创建请求失败:", err)
return "", "", "", err return "", "", "", err
} }
req.Header = r.Request.Header req.Header = r.Request.Header
req.Header.Set("Cookie", cookie2) req.Header.Set("Cookie", config.GetConfig().Cookie2)
client := &http.Client{} client := &http.Client{}
resp, err := client.Do(req) resp, err := client.Do(req)
if err != nil { if err != nil {
@ -141,7 +142,7 @@ func sendHTTPAndKimi(r *RequestResponseLog) (result string, respA string, respB
// fmt.Println("Response1 Body:", resp1) // fmt.Println("Response1 Body:", resp1)
// fmt.Println("Response2 Body:", resp2) // fmt.Println("Response2 Body:", resp2)
if len(resp1+resp2) < 65535 { if len(resp1+resp2) < 65535 {
result, err := detectPrivilegeEscalation(AI, fullURL.String(), resp1, resp2) result, err := detectPrivilegeEscalation(config.GetConfig().AI, fullURL.String(), resp1, resp2)
if err != nil { if err != nil {
fmt.Println("Error:", err) fmt.Println("Error:", err)
return "", "", "", err return "", "", "", err