lintsinghua / lintsinghua/DeepAudit

smart_scan这个工具,里面对漏洞类型是写死的,但是平台会传入越权类型的检测

Open
#201 0 comments 0 reactions 0 assignees View on GitHub
Dominant language
Python
Stars
7k
Forks
850
PR merge metrics
No merged PRs in 30d

Description

smart_scan这个工具,里面对漏洞类型是写死的,但是平台会传入越权类型的检测

scan_file这个函数,里面只能匹配QUICK_PATTENS,那外部传入focus漏洞类型不起作用啊

Contributor guide

Open the contributing guide

Research direction

Start by locating the smart_scan tool and its scan_file function. Read how scan_file matches QUICK_PATTENS and how the externally supplied focus vulnerability type is passed in. Confirm the behavior with an authorization-bypass focus type; done means platform-provided vulnerability types affect scanning instead of being ignored by the hard-coded matching.

Written by the indexing model from the issue text.

Assessment

Tech stack
python
Domain
security
Issue type
Bug
Difficulty
3/5
Estimated time
1-2 days
Activity status
Quiet
Clarity
Mostly clear
Newbie friendliness
48/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.