gobysec / gobysec/Goby

Goby加载本地POC进行漏扫,但抓包发现流量中并无POC载荷

Open
#511 2 comments 0 reactions 0 assignees View on GitHub
fixed
Dominant language
No language data
Stars
1.5k
Forks
153
PR merge metrics
No merged PRs in 30d

Description

如标题所示,使用Goby加载本地POC进行漏扫,但抓包发现流量中并无POC载荷,只有一些类似敏感路径探测的请求(如P1),但是报告中显示的有漏洞名称(如P2)。请问是本地POC没有加载成功导致的,还是Goby漏扫逻辑就是这样,先进行服务指纹识别,如果未发现相关服务则不会发送POC请求。
![image](https://github.com/user-attachments/assets/16d02d8a-f376-494a-b42f-ba2fc779e7e1)
![image](https://github.com/user-attachments/assets/869d3ea0-262e-4660-ae71-b4d997a852c4)

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.