burpsuite掃描web目錄

1.進行抓包

 

2.將其發送到lntruder

 

3.使用替換腳本替換掉/

 

4.替換

 

5.替換結果

 

6.將多余的$$刪除，在/后面添加$$    //$$就是payload

 

7.測試結果

 

 替換腳本代碼:

import os
import re
user = input('Please enter the dictionary path:')
def config():
    path="{}".format(user)
    if os.path.exists(path):
        print('[+]Dictionary file existence')
        print(user)
    else:
        print('[-]The target dictionary does not exist')
        exit()
def replace():
    path=user
    foropen=open(path,'r')
    wlcw=""
    for line in foropen:
        if re.search("/",line):
            line=re.sub("/","",line)
            wlcw+=line
        else:
            wlcw+line
    print('[*]In the rewriting...')
    wopen=open(path,'w')
    wopen.write(wlcw)
    wopen.close()
    foropen.close()
replace()