cgi scanning rule description:
cgi.list is the rule file
Format: url<->matching rules<->post data, or url<->matching rules
There are three types of matching rules. The front represents the matching position, and the back can be a regular expression to represent the matching return content.
1.S:200|403 means http status contains 200 or 403
2.H:nginx|iis means the http header contains nginx or iis
3.B:mysql means the http body contains mysql characters
v9.9
1. Added cgi scanning function, fixed some bugs and enhanced stability
v9.5
1. Added error reporting mode function to scan SQL injection vulnerabilities more accurately
v9.1
1. Enhance POST request vulnerability scanning
2. Fix the bug of dic.txt dictionary guessing
v9.0
1. Added the function of extracting form parameters
2. Enhance directory browsing vulnerability scanning
3. Added custom scan dic.txt
4. Fix the bug that may crash when decompressing gzip
it works
it works
it works