{"id":13575704,"url":"https://github.com/gh0stkey/CaA","last_synced_at":"2025-04-04T23:30:34.098Z","repository":{"id":39665759,"uuid":"317776340","full_name":"gh0stkey/CaA","owner":"gh0stkey","description":"CaA - Collector and Analyzer, Insight into information, exploring with intelligence in a thousand ways.","archived":false,"fork":false,"pushed_at":"2025-02-11T10:20:34.000Z","size":3641,"stargazers_count":1104,"open_issues_count":0,"forks_count":66,"subscribers_count":13,"default_branch":"master","last_synced_at":"2025-03-31T00:01:36.377Z","etag":null,"topics":["bounty-hunters","bounty-hunting-tools","burpsuite"],"latest_commit_sha":null,"homepage":"","language":"Java","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":"apache-2.0","status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/gh0stkey.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":"LICENSE","code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2020-12-02T06:55:56.000Z","updated_at":"2025-03-30T14:58:56.000Z","dependencies_parsed_at":"2025-02-28T19:09:30.688Z","dependency_job_id":"30c81478-6bc5-4d3c-9533-532620e5feb2","html_url":"https://github.com/gh0stkey/CaA","commit_stats":null,"previous_names":[],"tags_count":11,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gh0stkey%2FCaA","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gh0stkey%2FCaA/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gh0stkey%2FCaA/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/gh0stkey%2FCaA/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/gh0stkey","download_url":"https://codeload.github.com/gh0stkey/CaA/tar.gz/refs/heads/master","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":247266474,"owners_count":20910831,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":["bounty-hunters","bounty-hunting-tools","burpsuite"],"created_at":"2024-08-01T15:01:03.443Z","updated_at":"2025-04-04T23:30:34.080Z","avatar_url":"https://github.com/gh0stkey.png","language":"Java","funding_links":[],"categories":["Java","安全","burpsuite插件"],"sub_categories":[],"readme":"\n\u003cdiv align=\"center\"\u003e\n\u003cimg src=\"images/logo.png\" style=\"width: 20%\" /\u003e\n\u003ch4\u003e\u003ca href=\"https://github.com/gh0stkey/CaA\"\u003e信息洞察，智探千方！\u003c/a\u003e\u003c/h4\u003e\n\u003ch5\u003e第一作者： \u003ca href=\"https://github.com/gh0stkey\"\u003eEvilChen\u003c/a\u003e（中孚信息元亨实验室）, 第二作者： \u003ca href=\"https://github.com/0chencc\"\u003e0chencc\u003c/a\u003e（米斯特安全团队）\u003c/h5\u003e\n\u003c/div\u003e\n\n## 关于CaA\n\n**CaA**是一款网络安全（漏洞挖掘）领域下的辅助型项目，主要用于分析、拆解HTTP协议报文，提取HTTP协议报文中的参数、路径、文件、参数值等信息，并统计出现的频次，帮助用户构建出具有实战应用价值的Fuzzing字典。除此之外CaA可以生成各类HTTP请求提供给BurpSuite Intruder用于Fuzzing工作。\n\n**CaA**的设计思想来源于Web Fuzzing技术，皆在帮助用户发现隐藏的漏洞面，通过对信息的收集分析整理，让用户真正意义上的实现**数据挖掘**。\n\n**思路来源**:\n\n1. [我的Web应用安全模糊测试之路](https://gh0st.cn/archives/2018-07-25/1)\n2. [WebFuzzing方法和漏洞案例总结](https://gh0st.cn/archives/2019-11-11/1)\n\n**所获荣誉**:\n\n1. [入选2024年KCon兵器谱](https://mp.weixin.qq.com/s/H7QLItrMw-aaqL2-CAvBTg)\n\n**注意事项**:\n\n1. CaA采用`Montoya API`进行开发，需要满足BurpSuite版本（\u003e=2023.12.1）才能使用。\n\n## 使用方法\n\n插件装载: `Extender - Extensions - Add - Select File - Next`\n\n初次装载`CaA`会自动创建配置文件`Config.json`和数据库文件`CaA.db`：\n\n1. Linux/Mac用户的配置文件目录：`~/.config/CaA/`\n2. Windows用户的配置文件目录：`%USERPROFILE%/.config/CaA/`\n\n除此之外，您也可以选择将配置文件存放在`CaA Jar包`的同级目录下的`/.config/CaA/`中，**以便于离线携带**。\n\n你可以很方便的在CollectInfo中右键选择RAW、JSON、XML类型的参数值进行复制，用于对请求的测试。\n\n\u003cimg src=\"images/right-click-function.png\" style=\"width: 80%\" /\u003e\n\n### 功能说明\n\n收集的信息类型：\n1. GET、POST正常形式参数和值；\n2. Cookie名和值；\n3. POST（JSON、Multipart、XML）参数和值；\n4. 逐层路径、文件和完整路径。\n\n生成的Payload信息：\n1. GET请求；\n2. POST请求；\n3. POST With JSON请求；\n4. POST With XML请求；\n5. POST With Multipart请求；\n6. 目录逐层遍历请求。\n\n### 界面信息\n\n| 界面名称                  | 界面展示                                              |\n| ------------------------ | ---------------------------------------------------- |\n| Databoard（数据集合）     | \u003cimg src=\"images/databoard.png\" style=\"width: 80%\" /\u003e     |\n| Config（配置管理）    | \u003cimg src=\"images/config.png\" style=\"width: 80%\" /\u003e    |\n| Generator（字典生成） | \u003cimg src=\"images/generator.png\" style=\"width: 80%\" /\u003e |\n| CollectInfo（数据展示） | \u003cimg src=\"images/collectinfo.png\" style=\"width: 80%\" /\u003e |\n\n## 赞赏榜单\n\n感谢各位对项目的赞赏，以下名单基于赞赏时间进行排序，不分先后，如有遗留可联系项目作者进行补充。\n\n| ID       | 金额     |\n| -------- | -------- |\n| 树则     | 18.80元  |\n| 蒙蒙大   | 10.00元  |\n\n\n## 最后\n\n如果你觉得CaA好用，可以打赏一下作者，给作者持续更新下去的动力！\n\n\u003cdiv align=center\u003e\n\u003cimg src=\"images/reward.jpeg\" style=\"width: 30%\" /\u003e\n\u003c/div\u003e","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgh0stkey%2FCaA","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fgh0stkey%2FCaA","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fgh0stkey%2FCaA/lists"}