lintsinghua / lintsinghua/DeepAudit
smart_scan这个工具,里面对漏洞类型是写死的,但是平台会传入越权类型的检测
Open
- Dominant language
- Python
- Stars
- 7k
- Forks
- 850
- PR merge metrics
- No merged PRs in 30d
Description
smart_scan这个工具,里面对漏洞类型是写死的,但是平台会传入越权类型的检测
scan_file这个函数,里面只能匹配QUICK_PATTENS,那外部传入focus漏洞类型不起作用啊
Contributor guide
Research direction
Start by locating the smart_scan tool and its scan_file function. Read how scan_file matches QUICK_PATTENS and how the externally supplied focus vulnerability type is passed in. Confirm the behavior with an authorization-bypass focus type; done means platform-provided vulnerability types affect scanning instead of being ignored by the hard-coded matching.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- python
- Domain
- security
- Issue type
- Bug
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Quiet
- Clarity
- Mostly clear
- Newbie friendliness
- 48/100