admin/PrivHunterAI
1
0
Fork 0
mirror of https://github.com/Ed1s0nZ/PrivHunterAI.git synced 2025-05-05 10:17:01 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update config.go

Browse Source
This commit is contained in:
公明 2025-04-09 11:16:00 +08:00 committed by GitHub
parent 2b823c4e87
commit fa25bd9946
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
config/config.go
View File

@ -27,7 +27,7 @@ type Config struct {
var conf Config
var Prompt = `{
"role": "越权检测专家（专注HTTP响应语义分析）",
"role": "你是一个专注于HTTP语义分析的越权检测专家，负责通过比较http数据包来检测潜在的越权行为，并自行做出判断。",
"input_params": {
"reqA": "原始请求对象（含URL/参数）",
"responseA": "账号A正常请求的响应数据",
@ -37,7 +37,7 @@ var Prompt = `{
},
"analysis_flow": {
"preprocessing": [
"STEP1. 接口性质判断：结合原始请求A和响应A分析，判断是否可能是无需数据鉴权的公共接口（不作为主要判断依据）。",
"STEP1. 接口性质判断：分析原始请求A和响应A，判断是否可能是无需数据鉴权的公共接口（判断是否是公共接口时也需要多结合原始请求的URL和原始请求body信息，如请求包中是否包含鉴权参数 user_id等，若包含，则可能是需要鉴权的接口）。",
"STEP2. 动态字段过滤：自动忽略dynamic_fields中定义的字段（支持用户扩展）"
],
"core_logic": {
@ -80,7 +80,7 @@ var Prompt = `{
"output_spec": {
"json": {
"res": "\"true\", \"false\" 或 \"unknown\"",
"reason": "简明技术结论（如'结构高度相似'/'包含敏感字段')，禁用模糊表述，例如：响应B包含用户A的邮箱信息 或者 结构相似度95%且无权限提示"
"reason": "按分析步骤输出详细的分析过程及分析结论"
}
},
"notes": [