常见扫描器特征

目录

• awvs
• nessus
• appscan
• Rsas (绿盟极光)
• sqlmap

1. url

acunetix-wvs-test-for-some-inexistent-file
by_wvs
acunetix_wvs_security_test
acunetix
acunetix_wvs
acunetix_test

2. headers

Acunetix-Aspect-Password:
Cookie: acunetixCookie
Location: acunetix_wvs_security_test
X-Forwarded-Host: acunetix_wvs_security_test
X-Forwarded-For: acunetix_wvs_security_test
Host: acunetix_wvs_security_test
Cookie: acunetix_wvs_security_test
Cookie: acunetix
Accept: acunetix/wvs
Origin: acunetix_wvs_security_test
Referer: acunetix_wvs_security_test
Via: acunetix_wvs_security_test
Accept-Language: acunetix_wvs_security_test
Client-IP: acunetix_wvs_security_test
HTTP_AUTH_PASSWD: acunetix
User-Agent: acunetix_wvs_security_test
Acunetix-Aspect-Queries:任意值
Acunetix-Aspect:任意值

3. body

acunetix_wvs_security_test
acunetix

nessus

1. url

nessus
Nessus

2. headers

x_forwarded_for: nessus
referer: nessus
host: nessus

3. body

nessus
Nessus

appscan

1. url

Appscan

2. headers

Content-Type: Appscan
Content-Type: AppScanHeader
Accept: Appscan
User-Agent:Appscan

3. body

Appscan

Rsas (绿盟极光)

1. url

nsfocus

2. headers

User-Agent: Rsas

sqlmap

1. url

sqlmap

2. headers

User-Agent: sqlmap（后接版本号，跟当前版本有关系）

3. body

sqlmap