如何从HTTP响应中检测出某些东西

-4

I'am开发bash脚本可以从头标记检测Web应用程序防火墙，但是我可以找到像我的想法那样的示例？如何从HTTP响应中检测出某些东西

2017-04-06 Mohamed Khaled Fathy

那么你的脚本至今呢？ – odradek

要从bash中找到请求标题，你可以简单地使用curl。如果你在windows上，你会希望新的windows bash shell或者cygwin来运行它。

还有几十个技巧，你可以用任何你想要的格式来获得任何想要的东西，大量的SO问题来回答你提出的任何问题。

curl --head www.google.com 


HTTP/1.1 200 OK 
Date: Thu, 06 Apr 2017 02:07:00 GMT 
Expires: -1 
Cache-Control: private, max-age=0 
Content-Type: text/html; charset=ISO-8859-1 
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/answer/151657?hl=en for more info." 
Server: gws 
X-XSS-Protection: 1; mode=block 
X-Frame-Options: SAMEORIGIN 
Set-Cookie: NID=100=IoNzfnVsz_oaEwIQE182ysgVSHoZYRVKjTqSQ5GqKrz1ewxwav2ae5GPo_bx0apr39Pnn4yvM5RfsmQnJ_QFmllVwS34ts-bNrvkzDFIfaokkDTo1BXHDDI69duBn1f9kx4sXJ_rcCK28og6; expires=Fri, 06-Oct-2017 02:07:00 GMT; path=/; domain=.google.com; HttpOnly 
Transfer-Encoding: chunked 
Accept-Ranges: none 
Vary: Accept-Encoding

下面是使用curl得到响应头的例子：

curl -D - www.google.com 


HTTP/1.1 200 OK 
Date: Thu, 06 Apr 2017 02:11:26 GMT 
Expires: -1 
Cache-Control: private, max-age=0 
Content-Type: text/html; charset=ISO-8859-1 
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/answer/151657?hl=en for more info." 
Server: gws 
X-XSS-Protection: 1; mode=block 
X-Frame-Options: SAMEORIGIN 
Set-Cookie: NID=100=DrUalBDiHKiZkX0yETtowdWhEfjJy7ioPU0Fe7Wch9pbbYI8MeSbg8M42dHmwu-hKZmYUlnE7VIgLhJ_Zi6byG_PYpTu5s2KYUv9XjPeH-GfSOTSq22I2GnEqXZwhJv-Bdn0aYzCUugF9FHb3Q; expires=Fri, 06-Oct-2017 02:11:26 GMT; path=/; domain=.google.com; HttpOnly 
Accept-Ranges: none 
Vary: Accept-Encoding 
Transfer-Encoding: chunked 

<!doctype html><html itemscope="" itemtype="http://schema.org/WebPage" lang="en"><head><meta content="Search the world's information, including webpages, images, videos and more. Google has many special features to help you find exactly what you're looking for." name="description"><meta content="noodp" name="robots"><meta content="text/html; charset=UTF-8" http-equiv="Content-Type"><meta content="/images/branding/googleg/1x/googleg_standard_color_128dp.png" itemprop=<cut the rest of the HTTP request>

来源

2017-04-06 02:09:26

不，我要检测什么像X-XSS-Protection使用bash脚本从请求中找到或没有找到 –

你能稍微详细解释一下你正在寻找什么，目前尚不清楚。 –

如何从HTTP响应中检测出某些东西

回答

相关问题