{"action":"opened","issue":{"url":"https://api.github.com/repos/wufeifei/cobra/issues/39","repository_url":"https://api.github.com/repos/wufeifei/cobra","labels_url":"https://api.github.com/repos/wufeifei/cobra/issues/39/labels{/name}","comments_url":"https://api.github.com/repos/wufeifei/cobra/issues/39/comments","events_url":"https://api.github.com/repos/wufeifei/cobra/issues/39/events","html_url":"https://github.com/wufeifei/cobra/issues/39","id":170464159,"number":39,"title":"审计报告中解析每个漏洞的访问URL","user":{"login":"wufeifei","id":1611552,"avatar_url":"https://avatars.githubusercontent.com/u/1611552?v=3","gravatar_id":"","url":"https://api.github.com/users/wufeifei","html_url":"https://github.com/wufeifei","followers_url":"https://api.github.com/users/wufeifei/followers","following_url":"https://api.github.com/users/wufeifei/following{/other_user}","gists_url":"https://api.github.com/users/wufeifei/gists{/gist_id}","starred_url":"https://api.github.com/users/wufeifei/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/wufeifei/subscriptions","organizations_url":"https://api.github.com/users/wufeifei/orgs","repos_url":"https://api.github.com/users/wufeifei/repos","events_url":"https://api.github.com/users/wufeifei/events{/privacy}","received_events_url":"https://api.github.com/users/wufeifei/received_events","type":"User","site_admin":false},"labels":[{"url":"https://api.github.com/repos/wufeifei/cobra/labels/feature","name":"feature","color":"ffef00"}],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-08-10T16:45:30Z","updated_at":"2016-08-10T16:45:30Z","closed_at":null,"body":"## 思路\r\n针对特定框架，解析路由配置，找到访问每个漏洞点的URL。\r\n甚至后续可以根据漏洞类型构造出可直接利用的PoC。\r\n\r\n比如Kohana框架，可解析每层controller中的route/config.php文件，得出漏洞所在文件的访问路径，如未找到该文件的路由配置，则采取默认路由的方式生成访问路径。\r\n\r\n其它框架也类似做法，比如Laravel、ThinkPHP、Spring、Structs2等\r\n\r\n## 事项\r\n- [ ] 项目框架识别\r\n - [ ] Kohana\r\n - [ ] Spring\r\n- [ ] 项目路由解析\r\n - [ ] Kohana\r\n - [ ] Spring"}}
{"actor":{"display_login":"wufeifei"}}