Nikto中文使用教程nikto命令行選項—重播保存請求
使用保存功能（-Save）時，發現請求將保存在文本文件中。這些文件包含人類可讀的文本，但它們還包含請求和響應的JSON表示形式。可以使用“ replay.pl”腳本來重播此JSON請求。
replay.pl通過-file選項讀取并解析保存的文件，并且可以選擇通過代理（例如Burp）運行請求。這將允許進一步研究程序中更適合重放和重新發送攻擊的漏洞。
$ ./replay -file savedir_host_80_2012-09-11-00-07-42/host_80_2012-09-11_002114.txt -proxy localhost:8080
-------------------------------------------- Info
Request to: http://host:80/manual/
Test ID: 002114
OSVDB ID: 3092
Message: OSVDB-3092: /manual/: Web server manual found.
-------------------------------------------- Response
date: Tue, 11 Sep 2012 04:14:20 GMT
server: Apache/2.2.21 (Unix) mod_ssl/2.2.21 OpenSSL/0.9.8r DAV/2 PHP/5.3.10 with Suhosin-Patch
content-location: index.html.en
vary: negotiate,accept-language,accept-charset
tcn: choice
last-modified: Tue, 06 Sep 2011 02:41:54 GMT
etag: "15eb9df-1f07-4ac3cc53d8080;15eb9dd-32b-4ac3cc53d8080"
accept-ranges: bytes
content-length: 7943
keep-alive: timeout=5, max=100
connection: Keep-Alive
content-type: text/html
content-language: en
<?xml version="1.0" encoding="ISO-8859-1"?>
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN" "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
<html xmlns="http://www.w3.org/1999/xhtml" lang="en" xml:lang="en"><head><!--
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
This file is generated from xml source: DO NOT EDIT
XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX
-->
<title>Apache HTTP Server Version 2.2
Documentation - Apache HTTP Server</title>
...
推薦文章：