From 793cbba6bbec7b343cc8d9877b67cd86f192be9c Mon Sep 17 00:00:00 2001 From: test Date: Mon, 10 Aug 2026 05:25:52 +0000 Subject: [PATCH] =?UTF-8?q?=E8=87=AA=E5=8A=A8=E6=8C=96=E4=B8=8A=E4=BC=A0?= =?UTF-8?q?=E6=BC=8F=E6=B4=9E=EF=BC=8C=E8=BF=99=E6=AC=BE=E5=B7=A5=E5=85=B7?= =?UTF-8?q?=E7=9C=9F=E7=9A=84=E5=BC=BA=E3=80=81?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- data.json | 3 +- ...挖上传漏洞,这款工具真的强.md | 66 +++++++++++++++++++ 2 files changed, 68 insertions(+), 1 deletion(-) create mode 100644 doc/2026-08/自动挖上传漏洞,这款工具真的强.md diff --git a/data.json b/data.json index d1b40955..c2e83d43 100644 --- a/data.json +++ b/data.json @@ -21984,5 +21984,6 @@ "https://mp.weixin.qq.com/s/VcVF1LrtIc2DL-1wgvYtuw": "\"中国版Mythos\"图龙锋接入山石网科,AI漏洞挖掘能力拓展至网安产品", "https://mp.weixin.qq.com/s/cZQMfzJhKPT6AwgjoT2wWw": "CNNVD通报OpenClaw多个安全漏洞", "https://mp.weixin.qq.com/s/0BkiOD8GrBTgLsF7InfNIw": "【安全圈】电商平台前员工利用系统漏洞,0元购3000多件家电", - "https://mp.weixin.qq.com/s/Fqby_u4cAGcGi_cR578zmA": "漏洞预警: 普华PowerPMS两漏洞组合 无需账号拿下服务器" + "https://mp.weixin.qq.com/s/Fqby_u4cAGcGi_cR578zmA": "漏洞预警: 普华PowerPMS两漏洞组合 无需账号拿下服务器", + "https://mp.weixin.qq.com/s/eH9vKnecA8Ajq-4w2nhdsQ": "自动挖上传漏洞,这款工具真的强" } \ No newline at end of file diff --git a/doc/2026-08/自动挖上传漏洞,这款工具真的强.md b/doc/2026-08/自动挖上传漏洞,这款工具真的强.md new file mode 100644 index 00000000..63c80236 --- /dev/null +++ b/doc/2026-08/自动挖上传漏洞,这款工具真的强.md @@ -0,0 +1,66 @@ +# 自动挖上传漏洞,这款工具真的强 +Gentle-bae + Gentle-bae 菜鸟学信安 2026-08-10 02:05 + +项目介绍 + +一款专业的文件上传漏洞检测工具,支持多种绕过技术检测和自动化扫描。 + +![](https://mmbiz.qpic.cn/sz_mmbiz_png/5yYXmGfnscSHjR19kPYJFAS1dFKj9FbE6iaA41eRpiaspMLb5H7fvfTnZV9mZCn3WkbJe4cpffRJtcUPuaIagHdoHvZH9icwbzXD32KofAwFbM/640?wx_fmt=png&from=appmsg&watermark=1#imgIndex=0 "") +## 功能特性 + +**智能扫描:自动检测上传点,分析响应内容** + +**** +**代理抓包:内置 HTTP/HTTPS 代理,支持拦 截、修改、重放** + +**** +**Repeater:手动重放请求,调试绕过技术** + +**** + +**Intruder:自动化爆破,支持多种攻击模式** + +**** +**263+ 绕过技术:支持各种文件类型绕过、Content-Type 绕过、WAF 绕过等** + +**** +**Payload生成器:支持WebShell、Polyglot等多种载荷生成** + +**** +**暗色主题:现代化 UI 设计,长时间使用不疲劳** +## 安装 +### 环境要求 +- Python 3.8+ + +- Windows / Linux / macOS + +### 安装依赖 + +``` +pip install -r requirements.txt +``` + + +或者手动安装: +``` +pip install "httpx[http2,brotli]>=0.24.0"pip install "httpcore[asyncio]>=0.17.0"pip install mitmproxy>=10.0.0pip install PySide6>=6.4.0pip install beautifulsoup4>=4.11.0pip install Pillow>=9.0.0pip install lxml>=4.9.0 +``` +### 运行程序 +``` +python main.py +``` + +或者双击运行 UploadRanger.bat + (Windows) 或 UploadRanger.sh + (Linux/macOS) + +项目地址 + +https://github.com/Gentle-bae/UploadRanger + + + + + +