【笔记】CRLFuzz学习笔记

前言

A fast tool to scan CRLF vulnerability written in Go(Github

下载项目

1
2
git clone https://github.com/dwisiswant0/crlfuzz.git
cd crlfuzz

测试单个URL

<url>:被测试的URL

1
go run cmd/crlfuzz/main.go -u "<url>"

批量测试URL

<file>:URL列表文件

1
go run cmd/crlfuzz/main.go -l <file>

完成

参考文献

哔哩哔哩——xiaodisec