Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

关于有些网战指纹识别的不准确 #16

Open
KiritoLoveAsuna opened this issue Apr 15, 2022 · 4 comments
Open

关于有些网战指纹识别的不准确 #16

KiritoLoveAsuna opened this issue Apr 15, 2022 · 4 comments

Comments

@KiritoLoveAsuna
Copy link

15:59:27, tls, https, [200] [Bootstrap] [DedeCMS] [DFE-SCADA] [Enduser-Protection] [IBM-WebSphere] [Nginx] [PhpMyAdmin] [Ruijie-NGFW] [Sangfor-SSL-VPN] [Solarwinds-Traffic-Management] [WatchGuard-Firewall] [Yeastar-VOIP], https://155.138.218.158:443, NVWA Project
关于这个网站识别出的Dedecms的指纹， 但其实是这个网站中提到dedecms是在在他网站发布的dedecms的RCE漏洞中，我建议指纹关键字的识别应该限制在中
@zhzyker
Copy link
Owner

zhzyker commented Apr 15, 2022

慢慢优化这些规则了，现在规则比较多，也只是遇到哪个优化哪个了

@KiritoLoveAsuna
Copy link
Author

可以的， 上面有个没写清楚，应该是限制在html response的head里可能会好点

@KiritoLoveAsuna
Copy link
Author

安全菜鸟，随便提点意见，误当真

@jingyuexing
Copy link

可以借鉴Wappalyzer的规则进行匹配指纹

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
3 participants
@jingyuexing @zhzyker @KiritoLoveAsuna