目录导航
下载地址①: https://www.lanzous.com/i89g4vi
下载地址②:https://github.com/boy-hack/wooyun-payload/releases
项目地址:github
插件安装方式参考下面的页面
来自于一个小的想法,我们能否从一个http数据包获取一些历史漏洞来辅助?例如获得该域名的历史漏洞,获得URL相同路径的历史漏洞,以及URL各个参数的历史漏洞。于是爬了下乌云镜像,通过正则收集链接,又整理了其他各种信息,原本想存到数据库,但最后数据也不大,汇总到了一个json文件中。ps:正则收集的链接数据很重要,有的网页并不是直接给出了一个url,有的是一个http请求包,有的是sqlmap的信息,所以用了多个正则来处理,大概手动确定能处理100来个网页,才将全部的链接整理出来了。
burp插件
然后写了一个burp插件,用来辅助寻找http请求包中域名,路径,参数等获取乌云历史漏洞中类似的数据。
Payload排名Top
既然已经将wooyun中的一些url抓取出来,不如来统计一些常用的字典来丰富一下字典?
出现漏洞的端口Top100
端口号 | 出现次数 |
---|---|
8080 | 6710 |
80 | 2458 |
81 | 1345 |
8081 | 925 |
7001 | 885 |
8000 | 882 |
8088 | 740 |
8888 | 735 |
9090 | 578 |
8090 | 477 |
88 | 446 |
8001 | 406 |
82 | 401 |
9080 | 350 |
8082 | 301 |
8089 | 265 |
9000 | 225 |
8443 | 206 |
9999 | 185 |
8002 | 162 |
89 | 160 |
8083 | 142 |
8200 | 141 |
8008 | 135 |
90 | 135 |
8086 | 129 |
801 | 127 |
8011 | 120 |
8085 | 120 |
9001 | 118 |
9200 | 117 |
8100 | 111 |
8012 | 108 |
85 | 105 |
8084 | 102 |
8070 | 101 |
7002 | 99 |
8091 | 94 |
8003 | 92 |
99 | 91 |
7777 | 84 |
8010 | 78 |
443 | 73 |
8028 | 72 |
8087 | 71 |
83 | 70 |
7003 | 70 |
10000 | 68 |
808 | 64 |
38888 | 64 |
8181 | 64 |
800 | 63 |
18080 | 63 |
8099 | 62 |
8899 | 62 |
86 | 62 |
8360 | 58 |
8300 | 57 |
8800 | 52 |
8180 | 52 |
3505 | 49 |
7000 | 49 |
9002 | 47 |
8053 | 43 |
1000 | 42 |
7080 | 40 |
8989 | 38 |
28017 | 38 |
9060 | 36 |
888 | 34 |
3000 | 34 |
8006 | 34 |
41516 | 34 |
880 | 34 |
8484 | 34 |
6677 | 33 |
8016 | 32 |
84 | 32 |
7200 | 31 |
9085 | 30 |
5555 | 30 |
8280 | 29 |
7005 | 29 |
1980 | 29 |
8161 | 28 |
9091 | 27 |
7890 | 27 |
8060 | 27 |
6080 | 27 |
8880 | 26 |
8020 | 26 |
7070 | 26 |
889 | 26 |
8881 | 24 |
9081 | 24 |
8009 | 24 |
7007 | 24 |
8004 | 23 |
38501 | 23 |
1010 | 23 |
最后得到的端口数量在1104,说明在端口扫描时,只需要扫描这一千端口就行,很大节省了效率。
ASP Top100
路径 | 出现次数 |
---|---|
/news_show.asp | 233 |
/about.asp | 205 |
/news.asp | 201 |
/login.asp | 173 |
/index.asp | 167 |
/admin/login.asp | 141 |
/list.asp | 130 |
/show.asp | 112 |
/shownews.asp | 88 |
/search.asp | 85 |
/News_show.asp | 85 |
/product.asp | 83 |
/news_list.asp | 70 |
/article.asp | 67 |
/view.asp | 59 |
/default_standard.asp | 59 |
/info.asp | 58 |
/news_more.asp | 57 |
/newshow.asp | 54 |
/news_detail.asp | 48 |
/news_view.asp | 47 |
/admin/index.asp | 46 |
/products.asp | 46 |
/nzcmslistnews.asp | 46 |
/read.asp | 44 |
/index1.asp | 44 |
/detail.asp | 43 |
/contact.asp | 42 |
/tt/inc/login.asp | 41 |
/default.asp | 41 |
/readnews.asp | 40 |
/mucc/about.asp | 39 |
/doc/page/main.asp | 38 |
/About.asp | 37 |
/onews.asp | 37 |
/cp.asp | 37 |
/News.asp | 36 |
/content.asp | 36 |
/doc/page/login.asp | 36 |
/productshow.asp | 35 |
/view_n.asp | 34 |
/new.asp | 33 |
/pic.asp | 33 |
/newsDetail.asp | 33 |
/job.asp | 33 |
/JBRCMS/Manager/jbrUploadConfig.asp | 33 |
/newsinfo.asp | 32 |
/newsbrow.asp | 30 |
/newsview.asp | 29 |
/admin/admin_login.asp | 29 |
/class.asp | 28 |
/ProductShow.asp | 28 |
/productview.asp | 28 |
/Article_Print.asp | 27 |
/newsshow.asp | 27 |
/LstInfo.asp | 27 |
/page.asp | 25 |
/jiannya/default.asp | 25 |
/CompHonorBig.asp | 24 |
/adminqibo5/Edit/editor/resurm_upfile.asp | 24 |
/feedback.asp | 23 |
/viewnews.asp | 22 |
/manage/login.asp | 22 |
/ShowNews.asp | 22 |
/more.asp | 22 |
/hn_type.asp | 22 |
/1.asp | 21 |
/service.asp | 20 |
/admin/Login.asp | 20 |
/readpro.asp | 20 |
/sbweb/nameedit.asp | 20 |
/Body.asp | 20 |
/opensoft.asp | 20 |
/main.asp | 19 |
/showcareer.asp | 19 |
/company.asp | 19 |
/Pro_shcn.asp | 19 |
/jjweb/nameedit.asp | 19 |
/cpinfo.asp | 19 |
/Htmledit/admin/login.asp | 19 |
//liuyan.asp | 19 |
/showfwly.asp | 19 |
/MoralsView.asp | 18 |
/user/reg.asp | 18 |
/product_show.asp | 18 |
/fuwu_list.asp | 18 |
/lesiure/up.asp | 18 |
/shell.asp | 17 |
/admin.asp | 17 |
/admin/admin.asp | 17 |
/showservices.asp | 17 |
/manage/html/ewebeditor/admin_login.asp | 17 |
/Newsview.asp | 17 |
/admin/Admin_Login.asp | 16 |
/down.asp | 16 |
/info_Print.asp | 16 |
/person/mailbox.asp | 16 |
/jieshao.asp | 16 |
/type.asp | 16 |
/product_cate.asp | 16 |
ASPX Top100
路径 | 出现次数 |
---|---|
/Default.aspx | 349 |
/login.aspx | 341 |
/UIFrameWork/login.aspx | 307 |
/Login.aspx | 288 |
/Detail.aspx | 209 |
/admin/login.aspx | 157 |
/index.aspx | 127 |
/default.aspx | 124 |
/OT.OA.WEB/UIFrameWork/login.aspx | 76 |
/search.aspx | 58 |
/userlogin.aspx | 57 |
/list.aspx | 54 |
/Admin/login.aspx | 48 |
/custom/GroupNewsList.aspx | 45 |
//SubCategory.aspx | 42 |
/manage/login.aspx | 38 |
/aspx/gqxx.aspx | 38 |
/newsView.aspx | 38 |
/news.aspx | 37 |
/Search.aspx | 34 |
/admin/index.aspx | 31 |
/Web/Login/PSCP01001.aspx | 30 |
/city_index.aspx | 30 |
/main.aspx | 29 |
/newslist.aspx | 29 |
/admin/Login.aspx | 28 |
/show.aspx | 28 |
/Admin/Index.aspx | 27 |
/SubCategory.aspx | 26 |
/G2S/AdminSpace/QE/AddCustomForm.aspx | 26 |
/NewsList.aspx | 25 |
/Index.aspx | 24 |
/about.aspx | 23 |
/gmis/leftmenu.aspx | 23 |
/Permission/ApplicationQueryList.aspx | 22 |
/test.aspx | 22 |
/site/ajax/WebSiteAjax.aspx | 22 |
/select_e.aspx | 22 |
/ExhibitionCenter.aspx | 22 |
/system/stuuserregist.aspx | 21 |
/News.aspx | 21 |
/workplate/xzsp/gxxt/tjfx/spsl.aspx | 21 |
/manager/member/admin_add.aspx | 20 |
/workplate/xzsp/tjfx/grbjtj/list.aspx | 20 |
/zfmllist.aspx | 20 |
/workplate/base/person/listbyorgsel.aspx | 20 |
/NewsDetail.aspx | 19 |
/Supplylist.aspx | 19 |
/Product/ProductList.aspx | 19 |
/Web/Login.aspx | 18 |
/articleview.aspx | 18 |
/model/TwoGradePage/equipmentlist.aspx | 18 |
/jsondb/otherreport.aspx | 18 |
/jsondb/flightreturn.aspx | 18 |
//bos/desktop/RequestOrResponse.aspx | 18 |
/Broadcast/Broadcast.aspx | 18 |
/jsondb/meblist.aspx | 18 |
/searchbargain.aspx | 18 |
/jsondb/aircompany.aspx | 18 |
/RiskInfo.aspx | 18 |
/owa/auth/logon.aspx | 17 |
/WebDefault3.aspx | 17 |
/article.aspx | 17 |
/G2S//AdminSpace/PublicClass/AddCourseWare.aspx | 17 |
/news_view.aspx | 16 |
/info.aspx | 16 |
/CommonPage.aspx | 16 |
/DownLoadPage.aspx | 16 |
/fckeditor/editor/filemanager/connectors/aspx/connector.aspx | 16 |
/support/minisite/thinkpad/htmls/advancedsearch.aspx | 16 |
/emlib4/format/release/aspx/eml_homepage.aspx | 16 |
/Gmis/Byyxwgl/xls_lwdbxxedit.aspx | 16 |
/CMSUploadFile.aspx | 16 |
/Main.aspx | 15 |
/OrderDetail.aspx | 15 |
/webSchool/list.aspx | 15 |
/Magazine/NewMagazine.aspx | 15 |
/k4/list.aspx | 15 |
/k1/preview.aspx | 15 |
/MoreIndex.aspx | 15 |
/sysadmin/Login.aspx | 15 |
/persondh/urgent.aspx | 15 |
/OnlineQuery/QueryList.aspx | 15 |
/Broadcast/displayNewsPic.aspx | 15 |
/Web/News.aspx | 15 |
/ModifyPassWord.aspx | 15 |
/ftb.imagegallery.aspx | 14 |
/TableDataManage/BaseInforQueryContent.aspx | 14 |
/presellbuild.aspx | 14 |
/tabid/2159/Default.aspx | 14 |
/cart.aspx | 14 |
/G2S/AdminSpace/PublicClass/AddCathedraWare.aspx | 14 |
/admin/course/uploaddemo.aspx | 14 |
/searchLines.aspx | 14 |
/help/pendantShow.aspx | 14 |
/BsGuide.aspx | 13 |
/NewsView.aspx | 13 |
/Admin/fileManage.aspx | 13 |
/ShowNews.aspx | 13 |
/Web_Site/Search.aspx | 13 |
Jsp Top100
路径 | 出现次数 |
---|---|
/login.jsp | 317 |
/index.jsp | 176 |
/kingdee/login/loginpage.jsp | 160 |
/get_pwd.jsp | 126 |
/zecmd/zecmd.jsp | 109 |
/console/login/LoginForm.jsp | 103 |
/login/Login.jsp | 88 |
/customer.jsp | 87 |
/is/index.jsp | 81 |
/uddiexplorer/SearchPublicRegistries.jsp | 79 |
/yyoa/common/js/menu/test.jsp | 74 |
/jcms/interface/user/out_userinfo.jsp | 59 |
/seeyon/index.jsp | 53 |
/download.jsp | 53 |
/yyoa/checkWaitdo.jsp | 50 |
/admin/login.jsp | 49 |
/list.jsp | 46 |
/defaultroot/login.jsp | 45 |
/upload5warn/shell.jsp | 45 |
/search.jsp | 43 |
/myname/wooyun.jsp | 40 |
/web/epublic/upload.jsp | 39 |
/yyoa/indexPass.jsp | 39 |
/yyoa/common/selectPersonNew/initData.jsp | 37 |
/bak.jsp | 35 |
/yyoa/index.jsp | 35 |
/postAjax.jsp | 35 |
/cK/foot.jsp | 34 |
/tools/SWFUpload/upload.jsp | 32 |
/nei.jsp | 32 |
/1.jsp | 31 |
/wooyun.jsp | 31 |
/is/cmd.jsp | 30 |
/download/download.jsp | 29 |
/cmd.jsp | 29 |
/webschool/News/news_list.jsp | 28 |
/chopper/chopper.jsp | 27 |
/business/notifyView.jsp | 27 |
/sofpro/gecs/consulmanage/wsts/bbstitlelist1.jsp | 27 |
/live800/downlog.jsp | 26 |
/Silic.jsp | 26 |
/edoas2/oa.jsp | 26 |
/wooyun/wooyun.jsp | 25 |
/jmxroot/jmxroot.jsp | 25 |
/manage/content/docmanage/download.jsp | 25 |
/ConInfoParticular.jsp | 24 |
/uddiexplorer/out.jsp | 23 |
/1/sx/login.jsp | 23 |
/templates/index/hrlogon.jsp | 23 |
/commfront/tzzx/uploadImageFiledo.jsp | 23 |
/yyoa/ext/https/getSessionList.jsp | 22 |
/admin/index.jsp | 22 |
/shell.jsp | 22 |
/admin/upload.jsp | 22 |
/detail.jsp | 22 |
/1/sjleader/login.jsp | 22 |
/admin/select.jsp | 22 |
/admin/fxx.jsp | 22 |
/jbossass/jbossass.jsp | 21 |
/yyoa/HJ/iSignatureHtmlServer.jsp | 21 |
/eol/homepage/common/index.jsp | 21 |
/a/pwn.jsp | 21 |
/web/common/getfile.jsp | 21 |
/upload.jsp | 20 |
/test.jsp | 20 |
/homepage/LoginHomepage.jsp | 20 |
/page/maint/common/UserResourceUpload.jsp | 20 |
/zpsys/index.jsp | 20 |
/vc/vc/para/opr_initvc.jsp | 20 |
/pages/manager/managerAddNManager.jsp | 20 |
/hdcy/zxzx_show.jsp | 20 |
/yyoa/assess/js/initDataAssess.jsp | 19 |
/upload5warn/wooyun.jsp | 19 |
/cms/weblawcase/impList.jsp | 19 |
/nicknamelogin.jsp | 19 |
/ca/ma3.jsp | 19 |
/gkznInfo.jsp | 19 |
/myname/index.jsp | 18 |
/df/index.jsp | 18 |
/guige.jsp | 18 |
/coremail/index.jsp | 18 |
/syfile/swfUpload.jsp | 18 |
/admin/protected/index.jsp | 17 |
/2/sjtj/login.jsp | 17 |
/news.jsp | 17 |
/site/law_artile.jsp | 17 |
/zwdtSjgl/Directory/lastDirList_iframe.jsp | 17 |
/content/topicdeal.jsp | 17 |
/webschool/Book/news_list.jsp | 17 |
//web/careerapply/HrmCareerApplyPerView.jsp | 16 |
/cms/web/downloadFiles.jsp | 16 |
/TSPB/web/xzzx/xzzx.jsp | 16 |
/prosec.jsp | 16 |
/adminroot/common/downLoadFile.jsp | 16 |
/uddiexplorer/SetupUDDIExplorer.jsp | 15 |
/kingdee/login/loginpage2.jsp | 15 |
/wui/theme/ecology7/page/login.jsp | 15 |
/f1print/F1PrintKernelJ1.jsp | 15 |
/login/login.jsp | 15 |
/eln3_asp/public/cscec8b/bulletin.jsp | 15 |
PHP Top100
路径 | 出现次数 |
---|---|
/index.php | 2456 |
/admin.php | 278 |
/login.php | 243 |
/forum.php | 240 |
/share/share.php | 227 |
/news.php | 208 |
/info.php | 191 |
/phpinfo.php | 181 |
/plus/search.php | 173 |
/test.php | 162 |
/admin/login.php | 162 |
/src/system/login.php | 146 |
/article.php | 140 |
/plus/recommend.php | 138 |
/search.php | 136 |
/list.php | 132 |
/api.php | 117 |
/admin/index.php | 117 |
/CmxDownload.php | 113 |
/about.php | 109 |
/news_show.php | 98 |
/download.php | 97 |
/home.php | 81 |
/login/login.php | 80 |
/user.php | 79 |
/show.php | 76 |
/page.php | 71 |
/product.php | 68 |
/wp-login.php | 67 |
/main.php | 67 |
/detail.php | 65 |
/news_detail.php | 64 |
/faq.php | 64 |
/default.php | 60 |
/content.php | 59 |
//plus/recommend.php | 58 |
/news_display.php | 57 |
/up/UploadTemp/eval.php | 57 |
/down.php | 55 |
/www/index.php | 55 |
/user/storage_explore.php | 54 |
/abouts.php | 53 |
/uc_server/admin.php | 50 |
/rss.php | 49 |
/wescms/index.php | 49 |
/1.php | 45 |
/news_info.php | 43 |
/products_display.php | 42 |
/newsdetail.php | 41 |
/phpmyadmin/index.php | 39 |
/class.php | 39 |
/more.php | 38 |
//index.php | 38 |
/userlist.php | 37 |
/plugin.php | 36 |
/*.php | 36 |
/products.php | 35 |
/pics_list.php | 34 |
/plus/mytag_js.php | 34 |
/news_list.php | 34 |
/newsinfo.php | 34 |
/smenu.php | 33 |
/include/web_content.php | 31 |
/batch.common.php | 31 |
/space.php | 30 |
/modules.php | 30 |
/view.php | 30 |
/read.php | 30 |
/job.php | 30 |
/do.php | 29 |
/link.php | 29 |
/displaynews.php | 29 |
/viewthread.php | 28 |
/m.php | 28 |
/web/index.php | 28 |
/member/index.php | 28 |
/ajax.php | 27 |
/impl/rpccompanyinfo_minkh.php | 27 |
//plus/search.php | 27 |
/thi.php | 27 |
/i.php | 26 |
/member.php | 25 |
/webmail/login.php | 25 |
/admincp.php | 25 |
/download_list.php | 25 |
/cmxlogin.php | 25 |
/auto_reg.php | 25 |
/register.php | 24 |
/news/class/index.php | 24 |
/prog/index.php | 24 |
/thi_details.php | 23 |
/topic.php | 23 |
/shopadmin/index.php | 23 |
/cp.php | 23 |
/phpsso_server/index.php | 23 |
/common/web_meeting/index.php | 23 |
/cn/products.php | 23 |
/Customize/Audit/MessageMonitor/groupSearch.php | 23 |
/new/client.php | 23 |
/notice.php | 22 |
Action Top100
路径 | 出现次数 |
---|---|
/root/chat.action | 429 |
/login.action | 291 |
/index.action | 227 |
/homeLogin.action | 46 |
/portal/login_init.action | 46 |
/stardy/Login.action | 40 |
/login_login.action | 24 |
/license!getExpireDateOfDays.action | 23 |
/indexAction.action | 23 |
/index/downLoadFile.action | 22 |
/common/common_info.action | 21 |
/pages/xxfb/editor/uploadAction.action | 21 |
/accountlossList.action | 21 |
/ggxxfb.action | 21 |
/ivhs/ajax_updateUserInfo.action | 20 |
/download.action | 19 |
/Login.action | 19 |
/syfile/imageCompress.action | 18 |
/managerOneGgxxfb.action | 18 |
/user/login.action | 17 |
/loginAction!login.action | 16 |
/index!index.action | 15 |
/login/login.action | 15 |
/managerNManager.action | 15 |
/home.action | 14 |
/indexmanagerLogin.action | 14 |
/ahsffyww/Default3.action | 14 |
/DRP/login.action | 12 |
/spam/system/index.action | 12 |
/user/gotoLoginPage.action | 12 |
/ecp/announcement/announcement_view2.action | 12 |
/managerAddNManager.action | 12 |
/managerEditNManager.action | 12 |
/main.action | 11 |
/system/login_login.action | 11 |
/login!login.action | 10 |
/loginAction.action | 10 |
/login/index.action | 10 |
/logout.action | 10 |
/register.action | 10 |
/security/loginInit.action | 10 |
/bgxz/bgxzAction_executeBack.action | 10 |
/nFixcardAllList.action | 10 |
/beian/login_login.action | 10 |
//opac_two/mylibrary/comment/queryAllComment.action | 10 |
/module/newzwgk/getmainById.action | 10 |
/index/index.action | 9 |
/shop/member!passwordRecover.action | 9 |
/mail/login.action | 9 |
/admin/login.action | 9 |
/htweixin/InsuranceDownload.action | 9 |
//admin/user_logon.action | 9 |
/BSBM/loginedLogin.action | 9 |
/robot/check-login.action | 8 |
/website/dflz/dflzSiteAction!sjList.action | 8 |
/module/newzwgk/viewquan.action | 8 |
/hbwz/wcms/searchAll.action | 8 |
/ahsffyww/Default2.action | 8 |
/wfvideo/login.action | 8 |
/website-rank/addVoteRecord.action | 8 |
/module/newzwgk/viewZwxxQianMore.action | 8 |
/superadmin/index.action | 7 |
/mall/ui/giftIndex.action | 7 |
/userlogin.action | 7 |
/cms/admin/login.action | 7 |
/szxy/logon.action | 7 |
/virtual/shouye.action | 7 |
/feedback/buyIntention!saveBuyIntentionInfo.action | 7 |
/superadmin/adminLogin.action | 7 |
/Index.action | 7 |
/security/login.action | 7 |
/MemberToLoginIgnore.action | 7 |
/rdms/satisfyaid/actions/cstContactAction!register.action | 7 |
/regmail/download.action | 7 |
/IndexAction.action | 6 |
/publish/query/indexFirst.action | 6 |
/manage/login.action | 6 |
/home/index.action | 6 |
/eeoaftp/downloadFile.action | 6 |
/eis/index.action | 6 |
/gzwl/visit/renewBusinessOrder/renewBusinessOrderDetail.action | 6 |
/css/myquery/queryWQSBill.action | 6 |
/LoginAction.action | 6 |
/detail.action | 6 |
/index/index!list.action | 6 |
/auth/login.action | 6 |
/server/spreq/attachment!download.action | 6 |
/lmsv5/user!editUserInfo.action | 6 |
/5clib/bookWeb.action | 6 |
/otomc/user/loginUI.action | 6 |
/im-client/imclient/selfHelp.action | 6 |
/ahsffyww/ZXDefault2.action | 6 |
/user!login.action | 6 |
/Dzsw/Shky/hwky.wai/index.action | 6 |
/aic/webnz/welcome-web-home!welcome.action | 6 |
/ess/Homepage.action | 6 |
/skypearl/cn/toPrintCard.action | 6 |
/spdt/spdt_listSp.action | 6 |
/xxsearch.action | 6 |
/web/Info!list.action | 6 |
目录Top100
路径 | 出现次数 |
---|---|
/admin | 2639 |
/user | 848 |
/.svn | 825 |
/.git | 670 |
/login | 615 |
/plus | 550 |
/news | 533 |
/web | 517 |
/upload | 495 |
/manager | 469 |
/xxgk/services | 465 |
/root | 437 |
/manage | 411 |
/ftp/com1/html | 409 |
/cgi-bin | 406 |
/servlet | 348 |
/content | 333 |
/api | 331 |
/share | 329 |
/member | 315 |
/UIFrameWork | 309 |
/cn | 277 |
/bbs | 275 |
/jmx-console | 273 |
/index | 245 |
/invoker | 244 |
/s | 231 |
/phpmyadmin | 222 |
/search | 220 |
/Admin | 211 |
/papers | 208 |
/yyoa | 207 |
/common | 206 |
/system | 202 |
/opac | 196 |
/account | 196 |
/uddiexplorer | 195 |
/ajax | 190 |
/cms | 188 |
/2001 | 187 |
/kingdee/login | 178 |
/Gmis/xw | 173 |
/1999 | 168 |
/include | 164 |
/portal | 161 |
/back/ticket | 161 |
/oa | 159 |
/Gmis/Byyxwgl | 158 |
/home | 156 |
/data | 155 |
/src/system | 148 |
/WEB-INF | 141 |
/main | 140 |
/Chinese | 134 |
/order | 132 |
/gov/services | 132 |
/wap | 131 |
/console | 130 |
/app | 130 |
/is | 129 |
/Web | 127 |
/resin-doc/resource/tutorial/jndi-appconfig | 126 |
/seeyon | 124 |
/config | 123 |
/images | 121 |
/download | 120 |
/view | 118 |
/public | 117 |
/product | 117 |
/model/TwoGradePage | 117 |
/knowledge/ClassShow | 115 |
/en | 114 |
/zecmd | 114 |
/m | 114 |
/soap/envelope | 112 |
/about | 111 |
/install | 110 |
/tushu | 107 |
/ckq | 107 |
/poweb | 106 |
/tips | 105 |
/resin-doc/viewfile | 104 |
/www | 104 |
/console/login | 103 |
/html | 103 |
/bbs/topic | 103 |
/data/admin | 103 |
/wscgs | 102 |
/sys | 102 |
/test | 99 |
/list | 99 |
/v_show | 98 |
/p | 97 |
/fckeditor/editor/filemanager/browser/default | 97 |
/User | 96 |
/uc_server | 96 |
//plus | 96 |
/site | 95 |
/detail | 95 |
/index.php | 94 |
get参数Top100
因为无法通过自动化程序把存在漏洞的参数提取出来,所以只是暴力的把所有url的参数都提取了出来,所以这些top参数不一定有代表性,但作为字典应该是不错的。
参数 出现次数
id 6845
action 1643
type 1503
m 1013
a 992
c 855
act 829
page 813
uid 616
url 585
method 545
cid 545
ID 528
mod 521
aid 490
keyword 474
key 449
t 449
q 444
callback 427
sid 426
s 421
name 407
tid 399
pid 392
code 354
r 316
p 307
file 301
Type 294
do 294
redirect 292
username 291
_ 278
op 259
filename 252
path 251
from 230
classid 227
f 222
fid 221
app 213
cmd 213
typeid 203
_FILES 201
ac 194
title 192
fileName 191
userid 190
v 189
flag 176
catid 170
Connector 166
bid 158
order 150
wd 150
mid 150
lang 145
nid 143
city 142
CurrentFolder 139
newsid 138
Command 137
password 131
d 128
source 127
sort 126
user 125
token 122
module 120
class 118
userId 115
dir 113
ie 111
Id 108
pwd 107
num 106
email 103
appid 102
u 102
mobile 102
i 102
keywords 100
version 100
status 99
gid 99
typeArr 96
g 96
service 95
o 95
ArticleID 94
query 94
filePath 94
orderId 94
redirect%3A%24%7B%23req%3D%23context.get%28%27com.opensymphony.xwork2.dispatcher.HttpServletRequest%27%29%2C%23a%3D%23req.getSession%28%29%2C%23b%3D%23a.getServletContext%28%29%2C%23c%3D%23b.getRealPath%28%22%2F%22%29%2C%23matt%3D%23context.get%28%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27%29%2C%23matt.getWriter%28%29.println%28%23c%29%2C%23matt.getWriter%28%29.flush%28%29%2C%23matt.getWriter%28%29.close%28%29%7D 93
category 92
word 92
user_id 92
k 91
channel 90
post参数Top100
参数 | 出现次数 |
---|---|
password | 457 |
__VIEWSTATE | 430 |
__EVENTVALIDATION | 315 |
username | 313 |
__EVENTTARGET | 210 |
__EVENTARGUMENT | 210 |
type | 145 |
name | 113 |
id | 111 |
Submit | 109 |
__VIEWSTATEGENERATOR | 103 |
action | 98 |
97 | |
mobile | 87 |
page | 86 |
submit | 85 |
pwd | 67 |
uid | 66 |
act | 64 |
phone | 59 |
code | 54 |
userName | 54 |
keyword | 52 |
__LASTFOCUS | 50 |
city | 50 |
<a href<=”” td=”” style=”box-sizing: border-box; color: rgb(30, 107, 184); font-size: 15px !important; word-break: break-all !important;”> | 47 |
userid | 47 |
content | 43 |
account | 42 |
y | 42 |
address | 41 |
x | 41 |
UserName | 40 |
title | 39 |
button | 39 |
token | 38 |
Password | 37 |
Button1 | 37 |
passwd | 37 |
province | 36 |
tel | 36 |
sex | 35 |
pageSize | 33 |
txtPassword | 29 |
userId | 29 |
version | 29 |
txtUserName | 29 |
url | 28 |
sort | 28 |
key | 27 |
ImageButton1.y | 27 |
ImageButton1.x | 27 |
user | 27 |
pageNo | 25 |
method | 25 |
status | 24 |
login | 22 |
sid | 22 |
channel | 22 |
21 | |
flag | 21 |
TextBox1 | 20 |
btnSearch | 20 |
pass | 20 |
user_id | 20 |
domain | 20 |
rows | 20 |
?> | 19 |
from | 19 |
sign | 19 |
uname | 19 |
order | 19 |
txtPwd | 19 |
pid | 18 |
btnLogin | 18 |
pageIndex | 18 |
search | 18 |
keywords | 18 |
loginName | 18 |
lang | 17 |
user_name | 17 |
timestamp | 17 |
imei | 17 |
PassWord | 17 |
captcha | 16 |
number | 16 |
language | 16 |
B1 | 16 |
appid | 16 |
area | 15 |
hash | 15 |
} | 15 |
(b)((‘\43context[\’xwork.MethodAccessor.denyMethodExecution\’]\75false’)(b)) | 14 |
(‘\43c’)((‘\43_memberAccess.excludeProperties\<a href<=”” td=”” style=”box-sizing: border-box; color: rgb(30, 107, 184); font-size: 15px !important; word-break: break-all !important;”> | 14 |
imageField.y | 14 |
imageField.x | 14 |
limit | 14 |
loginname | 14 |
txtName | 14 |
cmd | 14 |
Cookie参数Top100
参数 | 出现次数 |
---|---|
__utma | 226 |
__utmz | 221 |
__utmc | 169 |
__utmb | 142 |
HMACCOUNT | 126 |
bdshare_firstime | 100 |
pgv_pvi | 99 |
_ga | 91 |
BAIDUID | 80 |
__utmt | 71 |
pgv_si | 69 |
AJSTAToktimes | 56 |
ci_session | 55 |
_gat | 49 |
uid | 37 |
CheckCode | 33 |
safedog-flow-item | 33 |
SERVERID | 31 |
lzstat_uv | 27 |
username | 23 |
IESESSION | 23 |
vjuids | 23 |
ECS_ID | 22 |
ECS[display] | 21 |
ECS[history] | 21 |
AJSTATokpages | 21 |
ECS[visit_times] | 18 |
pgv_pvid | 18 |
SUV | 18 |
vjlast | 18 |
city | 17 |
iweb_hisgoods[15] | 16 |
IPLOC | 15 |
cck_count | 15 |
cck_lasttime | 15 |
lvsessionid | 14 |
LXB_REFER | 14 |
iweb_hisgoods[26] | 13 |
cookie | 13 |
CoreID6 | 13 |
NTKFT2DCLIENTID | 13 |
userName | 12 |
loginName | 12 |
BAIDUDUPlcr | 12 |
td_cookie | 12 |
ECSCP_ID | 12 |
_jzqx | 12 |
userid | 12 |
hd_sid | 11 |
real_ipd | 11 |
password | 11 |
route | 11 |
vary | 11 |
nTalkCACHEDATA | 11 |
token | 11 |
WT_FPC | 10 |
ADMINCONSOLESESSION | 10 |
pgv_info | 10 |
nickname | 10 |
guid | 10 |
jiathis_rdc | 10 |
HMVT | 10 |
tma | 10 |
tmd | 10 |
s | 10 |
S[CARTTOTALPRICE] | 10 |
S[CART_COUNT] | 10 |
S[CART_NUMBER] | 10 |
sessionid | 10 |
_jzqa | 10 |
looyu_id | 10 |
dyh_lastactivity | 9 |
SESSIONID | 9 |
s_cc | 9 |
s_sq | 9 |
.ASPXAUTH | 9 |
DedeUserID | 9 |
DedeUserID__ckMd5 | 9 |
sid | 9 |
user | 9 |
clientlanguage | 9 |
_jzqc | 9 |
lang | 9 |
wordpresstestcookie | 8 |
_qcwId | 8 |
language | 8 |
hasshown | 8 |
cityid | 8 |
myie | 8 |
s_nr | 8 |
__RequestVerificationToken | 8 |
… | 8 |
DedeUsername | 8 |
DedeUsername__ckMd5 | 8 |
loginState | 8 |
ip_ck | 8 |
vn | 8 |
lv | 8 |
pageReferrInSession | 8 |
__cfduid | 8 |
下载地址①: https://www.lanzous.com/i89g4vi
下载地址②:https://github.com/boy-hack/wooyun-payload/releases
项目地址:github