Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

SSRF漏洞检测不到 #1655

Open
xsstta opened this issue Aug 10, 2022 · 2 comments
Open

SSRF漏洞检测不到 #1655

xsstta opened this issue Aug 10, 2022 · 2 comments
Labels
bug Something isn't working DAST

Comments

@xsstta
Copy link

xsstta commented Aug 10, 2022

使用DoraBox作为靶机，可以监测到XXE（据此可以判断我的反连平台配置没问题），但是检测不到SSRF
@mayi077
Copy link

mayi077 commented Dec 8, 2022

这个需要在 配置文件里 配置反连平台吧

@Jarcis-cy
Copy link
Collaborator

可能是我们的ssrf模块的检测机制拦截了,后续我们会优化一下这个检测

@Jarcis-cy Jarcis-cy reopened this Dec 28, 2022
@Jarcis-cy Jarcis-cy added the bug Something isn't working label Dec 28, 2022
@Jarcis-cy Jarcis-cy added the DAST label Apr 11, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working DAST
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@xsstta @Jarcis-cy @mayi077