判断是否有参数及参数内容,如有,就调用awvs接口去扫描

参考
https://blog.csdn.net/sinat_25449961/article/details/82985638

可以参考
http://0cx.cc/about_awvs11_api.jspx
接口文档
https://github.com/h4rdy/Acunetix11-API-Documentation/

还没找到post型的,应该怎么办。。。

https://github.com/kafire/scantools/blob/d8a4750dd3b59d50e648b7a6b237cec277ea37bc/acunetix.py

现在思考的问题是,如何把一个数据包,如post型的,里面的body内容送到awvs

先创建target
POST /api/v1/targets HTTP/1.1
Host: 192.168.0.101:3443
Connection: close
Content-Length: 91
Accept: application/json, text/plain, */*
Origin: https://192.168.0.101:3443
X-Auth: 2986ad8c0a5b3df4d7028d5f3c06e936c5deefe8c612734733add4cdb96bb3b060b038ade653fdc7845be6b6b63cf49b779d6c20c6da792244cc00bf74116f70d
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Content-Type: application/json;charset=UTF-8
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Referer: https://192.168.0.101:3443/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Cookie: ui_session=2986ad8c0a5b3df4d7028d5f3c06e936c5deefe8c612734733add4cdb96bb3b060b038ade653fdc7845be6b6b63cf49b779d6c20c6da792244cc00bf74116f70d

{"address":"http://45.77.224.25:11010/bWAPP/login.php","description":"","criticality":"10"}

会有一个返回的target_id,然后用这个id去创建扫描

不发送cookie的格式为
POST /api/v1/scans HTTP/1.1
Host: 192.168.0.101:3443
Connection: close
Content-Length: 225
Accept: application/json, text/plain, */*
Origin: https://192.168.0.101:3443
X-Auth: 2986ad8c0a5b3df4d7028d5f3c06e936c5deefe8c612734733add4cdb96bb3b060b038ade653fdc7845be6b6b63cf49b779d6c20c6da792244cc00bf74116f70d
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/78.0.3904.108 Safari/537.36
Content-Type: application/json;charset=UTF-8
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: cors
Referer: https://192.168.0.101:3443/
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Cookie: ui_session=2986ad8c0a5b3df4d7028d5f3c06e936c5deefe8c612734733add4cdb96bb3b060b038ade653fdc7845be6b6b63cf49b779d6c20c6da792244cc00bf74116f70d

{"target_id":"69e82898-9629-4387-b9ff-6ed0aa424303","profile_id":"11111111-1111-1111-1111-111111111111","schedule":{"disable":false,"start_date":null,"time_sensitive":false},"ui_session_id":"ad297180f574e0c7f0eb631effd1360f"}
接口文档
http://wp.blkstone.me/wp-content/uploads/2019/11/Acunetix-API-Documentation.html#add-group


终于找到了,可以给数据包塞cookie