- Hands-On Bug Hunting for Penetration Testers
- Joseph Marshall
- 115字
- 2021-07-16 17:53:10
Scrapy and Custom Pipelines
scrapy is a popular web-crawling framework for Python that allows you to create web crawlers out of the box. It's a powerful general-purpose tool that, since it allows a lot of customization, has naturally found its way into professional security workflows. Projects such as XSScrapy, an XSS and SQLi scanning tool built on Scrapy, show the underlying base code's adaptability. Unlike the Burp Suite Spider, whose virtue is that it integrates easily with other Burp tools, and Striker, whose value comes in collecting DNS and networking info from its default configuration, Scrapy's appeal is that it can be set up easily and then customized to create any kind of data pipeline.
推薦閱讀
- Web漏洞分析與防范實戰:卷1
- 計算機病毒分析與防范大全(第3版)
- 反黑命令與攻防從新手到高手(微課超值版)
- INSTANT Windows PowerShell
- 諸神之眼:Nmap網絡安全審計技術揭秘
- 解密彩虹團隊非凡實戰能力:企業安全體系建設(共5冊)
- 信息安全案例教程:技術與應用(第2版)
- 隱私計算
- Instant Java Password and Authentication Security
- 學電腦安全與病毒防范
- CTF特訓營:技術詳解、解題方法與競賽技巧
- Practical Mobile Forensics
- Metasploit 5.0 for Beginners
- 數據恢復技術深度揭秘
- Cisco Firepower威脅防御(FTD)設備的高級排錯與配置