Delete xray_run_with_burp.bat
parent
88c70ef773
commit
2aa05bcf54
|
@ -1,73 +0,0 @@
|
||||||
:: authour: ym2011
|
|
||||||
:: time: 2020-12-07
|
|
||||||
:: verison: 1.1
|
|
||||||
|
|
||||||
@echo off
|
|
||||||
title xray run with burpsuite pro
|
|
||||||
|
|
||||||
set YYYYmmdd=%date:~0,4%%date:~5,2%%date:~8,2%
|
|
||||||
set hhmiss=%time:~0,2%%time:~3,2%%time:~6,2%
|
|
||||||
set report=xray_report_%YYYYmmdd%_%hhmiss%.html
|
|
||||||
|
|
||||||
goto comment
|
|
||||||
联动burp说明:https://docs.xray.cool/#/scenario/burp
|
|
||||||
引擎初次运行时,会在当前目录内生成一个 config.yaml 文件
|
|
||||||
按需进行修改config.yaml的配置
|
|
||||||
配置文件说明;https://docs.xray.cool/#/configration/config
|
|
||||||
restriction:
|
|
||||||
includes: # 允许扫描的域,此处无协议
|
|
||||||
- '*' # 表示允许所有的域名和 path
|
|
||||||
- 'example.com' # 表示允许 example.com 下的所有 path
|
|
||||||
- "example.com/admin*" # 表示允许 example.com 下的 /admin 开头的 path
|
|
||||||
excludes:
|
|
||||||
- '*google*'
|
|
||||||
- '*github*'
|
|
||||||
- '*.gov.cn'
|
|
||||||
- '*.edu.cn'
|
|
||||||
- '*chaitin*'
|
|
||||||
- '*xray.cool'
|
|
||||||
:comment
|
|
||||||
|
|
||||||
if not exist ca.crt (
|
|
||||||
goto generaca
|
|
||||||
) else (
|
|
||||||
goto backup
|
|
||||||
)
|
|
||||||
|
|
||||||
:generaca
|
|
||||||
echo ****************************************
|
|
||||||
echo **** genering ca.crt and ca.key ********
|
|
||||||
.\xray_windows_amd64.exe genca
|
|
||||||
echo generaca successfully.
|
|
||||||
|
|
||||||
:backup
|
|
||||||
if exist proxy.html (
|
|
||||||
goto backupreport
|
|
||||||
) else (
|
|
||||||
goto start
|
|
||||||
)
|
|
||||||
|
|
||||||
:backupreport
|
|
||||||
echo ****************************************
|
|
||||||
echo **** old report is backuping now *******
|
|
||||||
copy proxy.html %report%
|
|
||||||
echo successfully,it's name is: %report%.
|
|
||||||
del proxy.html
|
|
||||||
|
|
||||||
:start
|
|
||||||
rem 如果需要扫描教育政府类网站,请在config.yaml注释掉(前面加#),如# - '*.gov.cn'
|
|
||||||
rem 1、powershell 执行监听爬虫,联动burp
|
|
||||||
:: .\xray_windows_amd64.exe webscan --listen 127.0.0.1:7777 --html-output proxy.html
|
|
||||||
echo ****************************************
|
|
||||||
echo ********now, xary started***************
|
|
||||||
|
|
||||||
|
|
||||||
.\xray_windows_amd64.exe webscan --listen 127.0.0.1:7777 --html-output proxy.html
|
|
||||||
|
|
||||||
rem 2、使用 xray 基础爬虫模式进行漏洞扫描
|
|
||||||
:: .\xray_windows_amd64 webscan --basic-crawler http://testphp.vulnweb.com/ --html-output 1.html
|
|
||||||
|
|
||||||
rem 自1.2.0开始,高级版新增浏览器爬虫支持
|
|
||||||
::.\xray_windows_amd64 webscan --browser-crawler http://testphp.vulnweb.com/ --html-output 2.html
|
|
||||||
|
|
||||||
pause
|
|
Loading…
Reference in New Issue