{"id":13843070,"url":"https://github.com/MIMAZHAN/PVD-HACK","last_synced_at":"2025-07-11T17:33:14.814Z","repository":{"id":141294574,"uuid":"233809324","full_name":"MIMAZHAN/PVD-HACK","owner":"MIMAZHAN","description":"自动化越权检测PVD","archived":false,"fork":false,"pushed_at":"2020-01-15T11:35:03.000Z","size":5,"stargazers_count":12,"open_issues_count":0,"forks_count":0,"subscribers_count":1,"default_branch":"master","last_synced_at":"2024-08-05T17:35:56.479Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Python","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/MIMAZHAN.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null}},"created_at":"2020-01-14T09:52:12.000Z","updated_at":"2023-05-07T07:09:56.000Z","dependencies_parsed_at":"2024-02-03T03:58:25.430Z","dependency_job_id":"fb72cb79-8d1d-4452-a331-f5e9a4679ad3","html_url":"https://github.com/MIMAZHAN/PVD-HACK","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MIMAZHAN%2FPVD-HACK","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MIMAZHAN%2FPVD-HACK/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MIMAZHAN%2FPVD-HACK/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/MIMAZHAN%2FPVD-HACK/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/MIMAZHAN","download_url":"https://codeload.github.com/MIMAZHAN/PVD-HACK/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":225745419,"owners_count":17517639,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-08-04T17:01:54.467Z","updated_at":"2024-11-21T14:30:40.036Z","avatar_url":"https://github.com/MIMAZHAN.png","language":"Python","funding_links":[],"categories":["Python","Python (1887)"],"sub_categories":[],"readme":"## 自动化越权检测 PVD-HACK\n\n### 强依赖：\n* burpsuite -\u003e Proxy -\u003e HTTP history -\u003e Save items  \n* 注意不要勾选：base64-encode requests and responses\n\n### 参数说明：\n* -w 差异确定字符  \n* -f xml文件\n\n### 实现说明：\n* GET请求：  \n* 原始：http://hack.mimaz.com/index.php?id=2\u0026pid=3\u0026hack=qwer  \n* 修改：  \n1.http://hack.mimaz.com/index.php?id=1\u0026pid=3\u0026hack=qwer  \n2.http://hack.mimaz.com/index.php?id=2\u0026pid=2\u0026hack=qwer  \n请求四次：  \n两次带着header  两次不带着header\n\n* POST请求:   \n* 原始date：id=2\u0026asdp=1\u0026qwe=gfd    \n* 修改：  \n1.id=1\u0026asdp=1\u0026qwe=gfd  \n2.id=2\u0026asdp=0\u0026qwe=gfd  \n请求四次：  \n两次带着header  两次不带着header\n\n### 特别的：\n* 1.支持POST请求的JSON。  \n* 2.不支持异常编码的xml文档  \n* 3.还会继续修BUG\n* 4.这是第一版，后续会陆续增加识别率。","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FMIMAZHAN%2FPVD-HACK","html_url":"https://awesome.ecosyste.ms/projects/github.com%2FMIMAZHAN%2FPVD-HACK","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2FMIMAZHAN%2FPVD-HACK/lists"}