认证| AppSpider文档</标题><链接href＝＂//www.gcpym.com/areas/docs/includes/dist/app.css?466513941d217158390f" rel="stylesheet"> </head> <body> <div id="r7-global-nav"> <div id="react_0HMCK425BFQIR"> <header class="r7-nav mobile"> <section class="search-bar search-bar--mobile hide animate-out"> <form action="/search"> <div class="container flex flex-jc-c flex-ai-c"> <div class="search-content flex flex-jc-fs flex-ai-c"> <i class="r7-icon r7-icon-search-magnify"></i> <input type="search" class="search-input" name="q" placeholder="Search"> <input type="submit" class="search-submit button blue" value="搜索＂><input type="hidden" name="filters" value="productname_AppSpider＂><a id="btnSearchCloseMobile" class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a> </div> </div> </form> </section> <div class="search-overlay search-overlay--mobile overlay "></div> <nav class="main-nav "> <div class="container flex flex-jc-sb flex-ai-c"> <div class="flex flex-jc-c flex-ai-c"> <a class="main-nav__toggle"><i class="r7-icon text-white"></i></a> </div> <a class="main-nav__logo flex flex-jc-c flex-ai-c text-center" href="https://www.rapid7.com/" target="_blank"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7回家＂></a> <a class="search flex flex-jc-c flex-ai-c"><i class="r7-icon r7-icon-search-magnify text-white"></i></a> </div> <div class="main-nav__links flex flex-jc-c"> <ul> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/">产品</a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">了解解决方案</li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightIDR<div class="dropdown-category"> 用户行为分析和SIEM</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightVM<div class="dropdown-category"> 脆弱性管理</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightAppSec<div class="dropdown-category"> 动态应用安全测试</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightconnect/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightConnect<div class="dropdown-category"> 编制和自动化</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/threat-command/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> 威胁命令<div class="dropdown-category"> 威胁情报</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightCloudSec<div class="dropdown-category"> 云安全</div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">更多的解决方案</li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/metasploit/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> Metasploit<div class="dropdown-category"> 渗透测试</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/nexpose/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> Nexpose<div class="dropdown-category"> 脆弱性管理本地</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/tcell/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 由Rapid7 tCell<div class="dropdown-category"> 应用监控与保护</div> </div></a></li> </ul> <div class="dropdown-view-all flex flex-jc-sb flex-ai-c"> <a href="https://www.rapid7.com/products/insight-platform/">dota2必威联赛</a> <a href="https://www.rapid7.com/try/insight/" class="button blue">免费试用</a> </div> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/">服务</a> <div class="dropdown-content true"> <ul class="dropdown-menu"> <li class="dropdown-title">服务</li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-diamond-person.svg')"></div> <div class="dropdown-text"> 管理服务<div class="dropdown-category"> 运营、评估和报告</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-shield.svg')"></div> <div class="dropdown-text"> 安全咨询<div class="dropdown-category"> 评估、测试和响应</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/product-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 产品咨询<div class="dropdown-category"> 快速启动和配置</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/training-certification/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 培训和认证<div class="dropdown-category"> 技能和发展</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/support-and-customer-success/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/user-customer-service-call.svg')"></div> <div class="dropdown-text"> 客户成功<div class="dropdown-category"> 一站式支持中心</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/premium-support/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/premium-support-icon.svg')"></div> <div class="dropdown-text"> 高级支持<div class="dropdown-category"> 优先帮助和更快的解决方案</div> </div></a></li> </ul> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="">支持和资源</a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">支持</li> <li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-monitor.svg')"></div> <div class="dropdown-text"> 支持门户<div class="dropdown-category"> 联系客户支持</div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-notes.svg')"></div> <div class="dropdown-text"> 产品文档<div class="dropdown-category"> 探索产品指南</div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/release-notes/" class="has-icon">365必威 </a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/contact/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-envelope-email-checked-okay.svg')"></div> <div class="dropdown-text"> 联系我们<div class="dropdown-category"> 跟销售</div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">资源</li> <li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 基本面<div class="dropdown-category"> 基本的安全知识</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/blog/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-signal-wifi.svg')"></div> <div class="dropdown-text"> 博客<div class="dropdown-category"> 最新的行业新闻和安全专业知识</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/resources/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-note-authenticate.svg')"></div> <div class="dropdown-text"> 图书馆资源<div class="dropdown-category"> 电子书、白皮书、视频和简报</div> </div></a></li> <li class="dropdown-item"><a href="https://extensions.rapid7.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-plug-outlet-collection.svg')"></div> <div class="dropdown-text"> 扩展库<div class="dropdown-category"> 插件，集成和开发者社区</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/partners/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-partners.svg')"></div> <div class="dropdown-text"> 合作伙伴<div class="dropdown-category"> RAPID7合作伙伴生态系统</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-community-users.svg')"></div> <div class="dropdown-text"> 网络广播和事件<div class="dropdown-category"> 即将到来的机会与我们联系</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/db/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-vulnerability.svg')"></div> <div class="dropdown-text"> 漏洞与利用数据库<div class="dropdown-category"> 搜索最新的安全研究必威体育西汉姆联官网</div> </div></a></li> </ul> </div></li> <li class="main-nav__link "><a class="" href="https://www.rapid7.com/research/">必威体育西汉姆联官网</a></li> <li class="main-nav__link"><a href="https://insight.rapid7.com/saml/SSO" class="has-icon"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/icon-lock.svg"> 登录</a></li> </ul> </div> </nav> <nav class="sub-nav container flex flex-ai-c"> <div class="sub-nav__title"> <a href="//www.gcpym.com/">文档</a> </div> <ul> <li class="sub-nav__link dropdown "><a class="dropdown-trigger has-toggle">2018必威体育下载 </a> <div class="dropdown-content"> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/appspider/">2018必威体育下载 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight-agent/">58必威 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightappsec/">2020刀塔必威赛事 </a></li> <li class="dropdown-item"><a href="https://docs.divvycloud.com/">InsightCloudSec</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightconnect/">InsightConnect</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight/">dota2必威联赛</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightidr/">InsightIDR</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/sensor/">了解网络传感器</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightops/">InsightOps</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightvm/">InsightVM</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/metasploit/">Metasploit</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/nexpose/">Nexpose</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/tcell/">tCell</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/services/">Rapid7服务</a></li> </ul> </div></li> </ul> </nav> </header> <div class="dropdown-overlay overlay false"></div> <header class="r7-nav"> <nav class="main-nav"> <div class="container flex flex-jc-sb flex-ai-c"> <div class="main-nav__logo"> <a class="flex" href="https://www.rapid7.com/" target="_blank"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" alt="Rapid7回家＂></a> </div> <div class="main-nav__links flex flex-jc-c"> <ul> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/products/">产品</a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">了解解决方案</li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightidr/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightIDR<div class="dropdown-category"> 用户行为分析和SIEM</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightvm/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightVM<div class="dropdown-category"> 脆弱性管理</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightappsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightAppSec<div class="dropdown-category"> 动态应用安全测试</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightconnect/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightConnect<div class="dropdown-category"> 编制和自动化</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/threat-command/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> 威胁命令<div class="dropdown-category"> 威胁情报</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/insightcloudsec/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('/Areas/Docs/includes/img/r7-nav/icon-cloud.svg')"></div> <div class="dropdown-text"> InsightCloudSec<div class="dropdown-category"> 云安全</div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">更多的解决方案</li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/metasploit/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> Metasploit<div class="dropdown-category"> 渗透测试</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/nexpose/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> Nexpose<div class="dropdown-category"> 脆弱性管理本地</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/products/tcell/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 由Rapid7 tCell<div class="dropdown-category"> 应用监控与保护</div> </div></a></li> </ul> <div class="dropdown-view-all flex flex-jc-sb flex-ai-c"> <a href="https://www.rapid7.com/products/insight-platform/">dota2必威联赛</a> <a href="https://www.rapid7.com/try/insight/" class="button blue">免费试用</a> </div> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="https://www.rapid7.com/services/">服务</a> <div class="dropdown-content true"> <ul class="dropdown-menu"> <li class="dropdown-title">服务</li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/managed-services/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-diamond-person.svg')"></div> <div class="dropdown-text"> 管理服务<div class="dropdown-category"> 运营、评估和报告</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/security-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-shield.svg')"></div> <div class="dropdown-text"> 安全咨询<div class="dropdown-category"> 评估、测试和响应</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/product-consulting/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-report.svg')"></div> <div class="dropdown-text"> 产品咨询<div class="dropdown-category"> 快速启动和配置</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/training-certification/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 培训和认证<div class="dropdown-category"> 技能和发展</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/support-and-customer-success/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/user-customer-service-call.svg')"></div> <div class="dropdown-text"> 客户成功<div class="dropdown-category"> 一站式支持中心</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/services/premium-support/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/premium-support-icon.svg')"></div> <div class="dropdown-text"> 高级支持<div class="dropdown-category"> 优先帮助和更快的解决方案</div> </div></a></li> </ul> </div></li> <li class="main-nav__link dropdown "><a class="dropdown-trigger has-toggle" href="">支持和资源</a> <div class="dropdown-content two-col"> <ul class="dropdown-menu"> <li class="dropdown-title">支持</li> <li class="dropdown-item"><a href="https://www.rapid7.com/for-customers/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-monitor.svg')"></div> <div class="dropdown-text"> 支持门户<div class="dropdown-category"> 联系客户支持</div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-notes.svg')"></div> <div class="dropdown-text"> 产品文档<div class="dropdown-category"> 探索产品指南</div> </div></a></li> <li class="dropdown-item"><a href="//www.gcpym.com/release-notes/" class="has-icon">365必威 </a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/contact/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-envelope-email-checked-okay.svg')"></div> <div class="dropdown-text"> 联系我们<div class="dropdown-category"> 跟销售</div> </div></a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-title">资源</li> <li class="dropdown-item"><a href="https://www.rapid7.com/fundamentals/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-book-open.svg')"></div> <div class="dropdown-text"> 基本面<div class="dropdown-category"> 基本的安全知识</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/blog/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-signal-wifi.svg')"></div> <div class="dropdown-text"> 博客<div class="dropdown-category"> 最新的行业新闻和安全专业知识</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/resources/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-note-authenticate.svg')"></div> <div class="dropdown-text"> 图书馆资源<div class="dropdown-category"> 电子书、白皮书、视频和简报</div> </div></a></li> <li class="dropdown-item"><a href="https://extensions.rapid7.com/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-plug-outlet-collection.svg')"></div> <div class="dropdown-text"> 扩展库<div class="dropdown-category"> 插件，集成和开发者社区</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/partners/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-partners.svg')"></div> <div class="dropdown-text"> 合作伙伴<div class="dropdown-category"> RAPID7合作伙伴生态系统</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/about/events-webcasts/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-community-users.svg')"></div> <div class="dropdown-text"> 网络广播和事件<div class="dropdown-category"> 即将到来的机会与我们联系</div> </div></a></li> <li class="dropdown-item"><a href="https://www.rapid7.com/db/" class="has-icon"> <div class="dropdown-icon" style="background-image:url('https://www.rapid7.com/globalassets/_icons/global-nav/icon-vulnerability.svg')"></div> <div class="dropdown-text"> 漏洞与利用数据库<div class="dropdown-category"> 搜索最新的安全研究必威体育西汉姆联官网</div> </div></a></li> </ul> </div></li> <li class="main-nav__link "><a class="" href="https://www.rapid7.com/research/">必威体育西汉姆联官网</a></li> </ul> </div> <div class="main-nav__utility"> <ul> <li class="signin"><a href="https://insight.rapid7.com/saml/SSO"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/icon-lock.svg">登录</a></li> </ul> </div> </div> </nav> <section class="search-bar hide"> <div class="container flex flex-jc-c flex-ai-c"> <form action="/search" class="search-content flex flex-jc-c flex-ai-c"> <i class="r7-icon r7-icon-search-magnify"></i> <input type="search" class="search-input" name="q" placeholder="Search"> <input type="submit" class="search-submit button blue" value="搜索＂><input type="hidden" name="filters" value="productname_AppSpider＂><a class="search-close"><i class="r7-icon r7-icon-delete-x"></i></a> </form> </div> </section> <div class="search-overlay overlay "></div> <nav class="sub-nav "> <div class="container flex flex-jc-sb"> <a class="logo circle-button" href="https://www.rapid7.com/"><img src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo-short.svg" alt="Rapid7标志＂></a> <div class="sub-nav__links flex"> <ul class="flex flex-ai-c"> <li class="sub-nav__title"><a href="//www.gcpym.com/">文档</a></li> <li class="sub-nav__link dropdown "><a href="#" class="dropdown-trigger has-toggle">AppSpider</a> <div class="dropdown-content two-col--sm"> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/appspider/">2018必威体育下载 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight-agent/">58必威 </a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightappsec/">2020刀塔必威赛事 </a></li> <li class="dropdown-item"><a href="https://docs.divvycloud.com/">InsightCloudSec</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightconnect/">InsightConnect</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insight/">dota2必威联赛</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightidr/">InsightIDR</a></li> </ul> <ul class="dropdown-menu"> <li class="dropdown-item"><a href="//www.gcpym.com/sensor/">了解网络传感器</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightops/">InsightOps</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/insightvm/">InsightVM</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/metasploit/">Metasploit</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/nexpose/">Nexpose</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/tcell/">tCell</a></li> <li class="dropdown-item"><a href="//www.gcpym.com/services/">Rapid7服务</a></li> </ul> <div class="dropdown-view-all"> <a href="//www.gcpym.com/release-notes/">365必威 </a> </div> </div></li> </ul> </div> <div class="sub-nav__utility"> <a class="search"><i class="r7-icon r7-icon-search-magnify"></i></a> <a class="to-top circle-button"><i class="r7-icon r7-icon-arrow-chevron-up-solid"></i></a> </div> </div> </nav> </header> </div> </div> <div class="sidebar-container" id="product-doc"> <div id="react_0HMCK425BFQIQ"> <div class="container flex"> <div class="sidebar-content"> <div class="subnav"> <div class="subnav_group"> <h3>欢迎<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/welcome-to-appspider/" class=" "><span class="subnav_list-text">欢迎来到AppSpider</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/concepts/" class=" "><span class="subnav_list-text">概念</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>AppSpider职业<span class="subnav_list-toggle minus"></span></h3> <div> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/appspider-pro-quick-start-guide/" class=" "><span class="subnav_list-text">AppSpider Pro快速入门指南</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/install-appspider-pro/" class=" "><span class="subnav_list-text">安装AppSpider职业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/start-the-appspider-pro-user-interface/" class=" "><span class="subnav_list-text">启动AppSpider Pro用户界面</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item subnav_list-item--open"><a href="//www.gcpym.com/appspider/create-a-scan-config/" class=" "><span class="subnav_list-text">创建扫描配置</span><span class="subnav_list-toggle minus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/main-settings/" class=" "><span class="subnav_list-text">主要设置</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/questionnaire/" class=" "><span class="subnav_list-text">问卷调查</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/attack-policy/" class=" "><span class="subnav_list-text">攻击政策</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/proxy-settings/" class=" "><span class="subnav_list-text">代理设置</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item subnav_list-item--open"><a href="//www.gcpym.com/appspider/authentication/" class="active "><span class="subnav_list-text">身份验证</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/crawler-restrictions/" class=" "><span class="subnav_list-text">履带的限制</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/attack-restrictions/" class=" "><span class="subnav_list-text">攻击的限制</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/http-headers/" class=" "><span class="subnav_list-text">HTTP头信息</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/performance/" class=" "><span class="subnav_list-text">性能</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/reporting/" class=" "><span class="subnav_list-text">报告</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/web-service/" class=" "><span class="subnav_list-text">Web服务</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/recorded-traffic/" class=" "><span class="subnav_list-text">记录交通</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/browser-macro/" class=" "><span class="subnav_list-text">浏览器的宏</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/selenium-recordings/" class=" "><span class="subnav_list-text">硒的录音</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/parameters-training/" class=" "><span class="subnav_list-text">参数训练</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/custom-urls/" class=" "><span class="subnav_list-text">自定义url</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/advanced-options/" class=" "><span class="subnav_list-text">高级选项</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/advanced-options-scan-configuration-parameters/" class=" "><span class="subnav_list-text">扫描配置参数</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-your-web-application/" class=" "><span class="subnav_list-text">扫描您的web应用程序</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/monitor-an-ongoing-scan/" class=" "><span class="subnav_list-text">监视正在进行的扫描</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-status/" class=" "><span class="subnav_list-text">扫描状态</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/site-structure/" class=" "><span class="subnav_list-text">网站结构</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/site-info/" class=" "><span class="subnav_list-text">地点信息</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/findings/" class=" "><span class="subnav_list-text">发现</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-parameters/" class=" "><span class="subnav_list-text">扫描参数</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/appspider-pro-reports/" class=" "><span class="subnav_list-text">AppSpider专业报告</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/tools/" class=" "><span class="subnav_list-text">工具</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/traffic-recorder/" class=" "><span class="subnav_list-text">流量记录仪</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/traffic-viewer/" class=" "><span class="subnav_list-text">流量查看器</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/regex-builder/" class=" "><span class="subnav_list-text">正则表达式构建器</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/request-builder/" class=" "><span class="subnav_list-text">请求构建器</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/global-repository/" class=" "><span class="subnav_list-text">全球存储库</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/swagger-utility/" class=" "><span class="subnav_list-text">轻便实用程序</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/browser-macro-recorder/" class=" "><span class="subnav_list-text">浏览器宏记录器</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/rapid7-branding-tool/" class=" "><span class="subnav_list-text">Rapid7品牌工具</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/attack-module-reference/" class=" "><span class="subnav_list-text">攻击模块引用</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>AppSpider专业管理<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/appspider-pro-licensing/" class=" "><span class="subnav_list-text">AppSpider职业许可</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/update-appspider-pro/" class=" "><span class="subnav_list-text">更新AppSpider职业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/uninstall-appspider-pro/" class=" "><span class="subnav_list-text">卸载AppSpider职业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>AppSpider企业<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/getting-started-with-appspider-enterprise/" class=" "><span class="subnav_list-text">开始使用AppSpider Enterprise</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/installing-appspider-enterprise/" class=" "><span class="subnav_list-text">安装AppSpider企业</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/adding-a-cloud-engine-to-appspider-enterprise/" class=" "><span class="subnav_list-text">为AppSpider Enterprise添加云引擎</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/configuring-an-smtp-settings-for-appspider-enterprise/" class=" "><span class="subnav_list-text">为AppSpider Enterprise配置SMTP设置</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/connecting-to-an-ldap-directory-server/" class=" "><span class="subnav_list-text">连接LDAP目录服务器</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/enabling-saml-for-appspider-enterprise/" class=" "><span class="subnav_list-text">为AppSpider Enterprise启用SAML</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/creating-a-saml-certificate-with-your-idp/" class=" "><span class="subnav_list-text">使用IdP创建SAML证书</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/modifying-the-saml-configuration-file/" class=" "><span class="subnav_list-text">修改SAML配置文件</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/troubleshooting-saml-set-up-with-appspider-enterprise/" class=" "><span class="subnav_list-text">故障排除SAML设置与AppSpider企业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/using-saml-to-log-in-to-appspider-enterprise/" class=" "><span class="subnav_list-text">使用SAML登录AppSpider Enterprise</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/simultaneous-scanning/" class=" "><span class="subnav_list-text">同时扫描与AppSpider企业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/quality-gate/" class=" "><span class="subnav_list-text">质量检验关</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/update-appspider-enterprise/" class=" "><span class="subnav_list-text">更新AppSpider企业</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/appspider-enterprise-jira-integration/" class=" "><span class="subnav_list-text">AppSpider企业JIRA集成</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>AppSpider企业REST API<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/rest-api-overview/" class=" "><span class="subnav_list-text">企业REST API概述</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/authentication-operations/" class=" "><span class="subnav_list-text">身份验证操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-engine-operations/" class=" "><span class="subnav_list-text">扫描引擎操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-engine-group-operations/" class=" "><span class="subnav_list-text">扫描引擎组操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-configuration-operations/" class=" "><span class="subnav_list-text">扫描配置操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/blackout-operations/" class=" "><span class="subnav_list-text">停电操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-management/" class=" "><span class="subnav_list-text">扫描管理</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/report-management/" class=" "><span class="subnav_list-text">报告管理</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/findings-management/" class=" "><span class="subnav_list-text">结果管理</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scheduled-scan-management/" class=" "><span class="subnav_list-text">将扫描管理</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/client-operations/" class=" "><span class="subnav_list-text">客户端操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/group-operations/" class=" "><span class="subnav_list-text">集团业务</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/role-operations/" class=" "><span class="subnav_list-text">角色的操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/account-operations/" class=" "><span class="subnav_list-text">账户操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/system-admin-operations-1/" class=" "><span class="subnav_list-text">系统管理操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/target-operations/" class=" "><span class="subnav_list-text">目标操作</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/recurrences-explained/" class=" "><span class="subnav_list-text">复发的解释</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/use-case-scenarios/" class=" "><span class="subnav_list-text">用例场景</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scanstatus-flow-diagram/" class=" "><span class="subnav_list-text">ScanStatus流程图</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/use-case-scenario-c/" class=" "><span class="subnav_list-text">用例场景(c#)</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/additional-resources/" class=" "><span class="subnav_list-text">额外的资源</span><span class="subnav_list-toggle plus"></span></a> <div class="subnav_list-sub"> <ul> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/postman/" class=" "><span class="subnav_list-text">邮递员</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scan-config-xml-breakout/" class=" "><span class="subnav_list-text">扫描配置XML中断</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>自定义攻击模块API<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/attack-module-api-overview/" class=" "><span class="subnav_list-text">攻击模块API概述</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/attack-configuration-structure-reference/" class=" "><span class="subnav_list-text">攻击配置结构参考</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/building-attack-modules/" class=" "><span class="subnav_list-text">构建攻击模块</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/debugging-attack-modules/" class=" "><span class="subnav_list-text">调试攻击模块</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/module-configuration-file-reference/" class=" "><span class="subnav_list-text">模块配置文件参考</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/c-module-interface-reference/" class=" "><span class="subnav_list-text">c#模块接口参考</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>集成<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/jenkins-continuous-integration-with-appspider/" class=" "><span class="subnav_list-text">Jenkins与AppSpider持续集成</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/f5-big-ip-application-security-manager-asm-integration/" class=" "><span class="subnav_list-text">F5 BIG-IP Application Security Manager (ASM)集成</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>常见问题<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/common-crawling-issues/" class=" "><span class="subnav_list-text">常见的爬行问题</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/using-a-demo-key/" class=" "><span class="subnav_list-text">使用演示密钥</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/common-installation-questions-for-appspider-enterprise/" class=" "><span class="subnav_list-text">常见安装问题AppSpider企业版</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/common-installation-questions/" class=" "><span class="subnav_list-text">常见的安装问题</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/scanning-questions/" class=" "><span class="subnav_list-text">扫描的问题</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>Hackazon安装<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/hackazon-installation-guide/" class=" "><span class="subnav_list-text">Hackazon安装指南</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/conducting-a-basic-test-manually-against-hackazon/" class=" "><span class="subnav_list-text">对Hackazon进行手动的基本测试</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/how-to-test-a-mobile-app/" class=" "><span class="subnav_list-text">如何测试手机应用</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/how-to-test-the-web-application-automated/" class=" "><span class="subnav_list-text">如何测试Web应用程序(自动化)</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/how-to-test-a-rest-api/" class=" "><span class="subnav_list-text">如何测试REST API</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/create-a-custom-attack-module/" class=" "><span class="subnav_list-text">创建自定义攻击模块</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/appspider/conduct-mobile-application-testing-using-wifi-pineapple/" class=" "><span class="subnav_list-text">使用WiFi菠萝进行移动应用测试</span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> <div class="subnav_group"> <h3>发布说明<span class="subnav_list-toggle plus"></span></h3> <div style="display:none"> <ul class="subnav_list"> <li class="subnav_list-item"><a href="//www.gcpym.com/release-notes/appspider/" target="_blank" class=" external"><span class="subnav_list-text">AppSpider Pro发布说明<i class="r7-icon r7-icon-open-new-tab"></i></span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> <li class="subnav_list-item"><a href="//www.gcpym.com/release-notes/appspider-enterprise/" target="_blank" class=" external"><span class="subnav_list-text">AppSpider企业版发布说明<i class="r7-icon r7-icon-open-new-tab"></i></span></a> <div class="subnav_list-sub"> <ul></ul> </div></li> </ul> </div> </div> </div> </div> <div class="main-content"> <div class="inner-content"> <div class="html-block"> <h1 id="authentication">身份验证<span title="Copy link to clipboard"></span></h1> <p>Web应用程序通常有一个仅供注册用户使用的部分。web应用程序的这一部分只能通过登录应用程序进行评估，登录的过程称为“认证”。AppSpider支持多种方式对应用程序进行身份验证。您可以在<strong>身份验证</strong>选项卡的扫描配置向导。</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Authentication main screen.png"></a> <h1 id="simple-form-authentication">简单的表单验证<span title="Copy link to clipboard"></span></h1> <p>顾名思义，这种技术可以帮助您登录使用简单的基于表单的身份验证的网站。这些网站有一个由用户名字段、密码字段和提交按钮组成的登录表单。你可以参考这篇维基百科文章来了解更多关于基于表单的认证:<a href="https://en.wikipedia.org/wiki/HTTP%2BHTML_form-based_authentication">https://en.wikipedia.org/wiki/HTTP%2BHTML_form-based_authentication</a>．</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Simple form authentication.png"></a> <p>如果您的web应用程序使用简单的表单认证，您可以使用以下步骤配置认证设置:</p> <ol> <li>打开<strong>>简单表单身份验证</strong>选项卡。</li> <li>选择<strong>站点需要表单身份验证</strong>复选框。</li> <li>在相应的字段中输入您的用户名和密码。在“确认密码”字段中重新输入密码。</li> <li>如果您使用像Okta这样的单点登录解决方案，并且登录页面存在于扫描设置的域限制之外，请在“SSO”字段中输入登录页面的URL。</li> </ol> <h1 id="macro-authentication">宏观的身份验证<span title="Copy link to clipboard"></span></h1> <p>AppSpider有时可能无法到达您的应用程序的登录页面，或登录表单可能只有在您的网站上执行了特定的操作序列后才可用。例如，当从“Administration”窗口中按下“login”按钮时，登录表单可能在一个用Javascript动态生成的弹出窗口中。您可以通过记录宏来让AppSpider执行这一系列步骤。</p> <p>宏是一系列动作，如点击按钮或在网页中输入文本。AppSpider以xml格式记录这些序列<code class="prism-code language-text"><span class="token-line"><span class="token plain">.rec</span></span></code>文件。在扫描过程中，AppSpider可以重放该文件中的动作来登录web应用程序。如果您希望使用宏身份验证，您可以使用以下步骤配置它:</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Macro Login.png"></a> <ol> <li>打开<strong>认证>宏认证</strong>选项卡。</li> <li>选择<strong>使用登录宏(用于表单认证)</strong>复选框。</li> <li>如果您以前在这个系统上记录了一个登录宏，您可以通过使用<strong>省略号(…)</strong>按钮。如果您没有先前记录的宏，请执行下面的步骤。</li> <li>单击<strong>记录</strong>按钮。这将打开<a href="//www.gcpym.com/appspider/browser-macro-recorder">浏览器宏记录器</a>在新选项卡中。默认情况下，浏览器宏记录器将打开目标应用程序。</li> </ol> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Macro recorder.png"></a> <ol start="5"> <li>按照以下步骤登录到您的应用程序。将宏保存到本地系统的.rec文件中。默认情况下，AppSpider会将宏文件保存在AppSpider数据目录下的“macro”文件夹中。</li> </ol> <div class="block-callout warning"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>由于AppSpider记录您的操作并将它们转换为XPath命令，因此在记录登录宏时，除了登录所需的操作外，不要执行任何操作。此外，我们建议您单击每个输入数据的字段，而不是使用“标签”或“返回”按钮。在扫描过程中，引擎将重播宏，然后在屏幕上的页面“Advanced Options > Logged-in Regex”字段中查找模式。一旦AppSpider确认身份验证成功，它将继续进行扫描。</p> <p>如果登录状态的指示器隐藏在菜单项下，请展开它，以便AppSpider可以检查它并检查登录状态。如果你的应用程序是使用Angular、React或Ember等现代框架构建的，这一点尤其重要。通常情况下，这些框架会使用javascript来渲染这些字段，而这些字段在文档对象模型(DOM)中是看不到的。如果你在获取“Logged-in Regex”工作时遇到问题，我们建议你启用流量日志，并检查宏末尾返回的html响应。这将允许您看到扫描仪正在看到的内容，并帮助您创建一个工作的正则表达式。</p> </div> <ol start="6"> <li>关闭“浏览器宏记录”工具并返回“扫描配置”向导。</li> <li>控件重新播放宏来测试宏<strong>测试</strong>按钮。</li> <li>如果您的宏不能正常工作，而您希望调试它，您可以选择<strong>显示宏观重播</strong>复选框。在扫描过程中，会打开一个浏览器窗口，显示AppSpider在重放宏时所执行的所有步骤。这将让您找出引擎在哪里出现问题，并相应地修复宏记录。</li> <li>确定Chrome或Internet Explorer浏览器是否正确显示您的网站，并从“浏览器”下拉框中选择相应的条目。默认浏览器为Chrome。</li> </ol> <div class="block-callout info"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>浏览器设置配置用于回放宏的浏览器。如果您希望更改用于记录宏的浏览器，请单击<strong>选项</strong>菜单栏的菜单，然后转到<strong>选项>环境>宏记录>浏览器引擎</strong>．</p> </div> <h1 id="http-authentication">HTTP身份验证<span title="Copy link to clipboard"></span></h1> <p>HTTP协议支持使用用户名和密码进行认证。你可以使用这篇参考文章来了解更多关于HTTP身份验证的信息:<a href="https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/understanding-http-authentication">https://docs.microsoft.com/en-us/dotnet/framework/wcf/feature-details/understanding-http-authentication</a></p> <p>AppSpider支持HTTP认证的基本协议、NTLM协议和Kerberos协议。如果你的目标应用使用HTTP认证，你可以使用以下步骤配置认证过程:</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/HTTP Authentication.png"></a> <ol> <li>打开<strong>认证> HTTP认证</strong>选项卡。</li> <li>选择<strong>站点需要HTTP身份验证(基本、NTLM或Kerberos)</strong>复选框启用HTTP身份验证。</li> <li>在相应的字段中输入您的用户名和密码。如果用户名和密码与在Simple Form Authentication部分中输入的用户名和密码相同，则启用<strong>使用表格凭证</strong>复选框。</li> </ol> <div class="block-callout warning"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>NTLM身份验证将需要用户帐户的域和用户名，这两者都是区分大小写的。忘记包含域或使用不正确的情况将导致身份验证操作失败</p> </div> <h1 id="scan-bootstrap">扫描引导<span title="Copy link to clipboard"></span></h1> <p>许多现代web应用程序使用双因素身份验证等安全措施，在登录应用程序时需要手动干预。例如，假设您的应用程序要求您输入通过SMS发送给您的一次性密码，或CAPTCHA框中的文本。在这些情况下，可以使用Scan Bootstrap(通常称为Bootstrap)身份验证。</p> <p>在扫描期间，一个浏览器窗口将打开，并允许您手动引导扫描仪到登录区域，并完成所有步骤，以登录扫描仪进入网站。在登录过程完成后，AppSpider可以继续以自动化的方式扫描应用程序的漏洞。如果扫描引擎在扫描期间注销，它将触发引导身份验证以重新对应用程序进行身份验证。在这种情况下，浏览器窗口将再次弹出，以便您可以手动登录到应用程序。您可以使用以下步骤配置Bootstrap身份验证:</p> <ol> <li>打开<strong>认证>扫描引导</strong>选项卡。</li> <li>选择<strong>允许扫描引导</strong>复选框。</li> <li>设置登录应用程序所需的时间(以秒为单位)。缺省值是60秒。</li> </ol> <div class="block-callout warning"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>在扫描过程中，只执行登录到应用程序所需的步骤。在登录过程完成后，保持浏览器窗口打开，因为AppSpider会自动关闭它。AppSpider将在浏览器打开的网页中从“Advanced Options > Logged-in Regex”字段中寻找模式。如果登录状态指示器隐藏在菜单项下，请展开它，以便AppSpider可以检查它并检查登录状态。一旦确认身份验证成功，它将继续进行扫描。</p> </div> <h1 id="selenium-script-authentication">硒脚本验证<span title="Copy link to clipboard"></span></h1> <p>Selenium是一个用于web应用程序自动化测试的框架。用户可以记录诸如在表单中输入数据和使用Selenium点击按钮等操作，并按需重放这些操作，以确保web应用程序的行为符合要求。</p> <p>AppSpider支持使用Selenium文件进行身份验证，因此可以在Selenium脚本中记录登录到应用程序所需的操作。在扫描过程中，AppSpider可以重放该脚本中的动作来登录web应用程序。</p> <p>使用以下步骤来使用Selenium脚本进行身份验证:</p> <ol> <li>打开<strong>认证> Selenium Script认证</strong>选项卡。</li> <li>选择<strong>使用Selenium脚本(用于表单身份验证)</strong>复选框。</li> <li>选择Web驱动程序(参考:<a href="https://www.seleniumhq.org/docs/03_webdriver.jsp">https://www.seleniumhq.org/docs/03_webdriver.jsp</a>)用于您的Selenium脚本。AppSpider安装在Chrome浏览器的web驱动程序中，这将是默认使用的。</li> <li>单击<strong>省略号(…)</strong>按钮旁边的<strong>硒脚本文件</strong>文本框中。这将打开文件资源管理器。导航到支持的格式的Selenium文件并选择它。</li> <li>可以通过使用<strong>测试</strong>按钮。如果身份验证成功，您将看到一个弹出窗口，显示“Selenium Login执行成功”。</li> </ol> <p>下面是一些不同格式的Selenium身份验证脚本示例:</p> <div class="block-callout info"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>您必须为Selenium身份验证脚本使用端口32768。</p> </div> <h2 id="html-selenium-script">HTML - Selenium Script<span title="Copy link to clipboard"></span></h2> <div data-title=""> <pre class="prism-code language-tsx"> <div class="code-header"> xml<div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-tsx"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token prolog"><？xml version = " 1.0 " encoding = " utf - 8 " ?></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain"></span><span class="token operator"><</span><span class="token operator">！</span><span class="token constant">文档类型</span><span class="token plain">超文本标记语言</span><span class="token constant">公共</span><span class="token plain"></span><span class="token string">-//W3C//DTD XHTML 1.0 Strict//EN"</span><span class="token plain"></span><span class="token string">“http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd”</span><span class="token operator">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">超文本标记语言</span><span class="token tag"></span><span class="token tag attr-name">xmlns</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">http://www.w3.org/1999/xhtml</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name namespace">xml:</span><span class="token tag attr-name">朗</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">在</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">朗</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">在</span><span class="token tag attr-value punctuation">＂</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">头</span><span class="token tag"></span><span class="token tag attr-name">配置文件</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">http://selenium-ide.openqa.org/profiles/test-case</span><span class="token tag attr-value punctuation">＂</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">元</span><span class="token tag"></span><span class="token tag attr-name">http-equiv</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">内容类型</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">内容</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">text / html;utf - 8字符集=</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag punctuation">/></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">链接</span><span class="token tag"></span><span class="token tag attr-name">rel</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">selenium.base</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">href</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">http://webscantest.com/</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag punctuation">/></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">标题</span><span class="token tag punctuation">></span><span class="token plain">硒</span><span class="token tag punctuation"></</span><span class="token tag">标题</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">头</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">身体</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">表格</span><span class="token tag"></span><span class="token tag attr-name">单元格边距</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">1</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">单元格间距</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">1</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">边境</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">1</span><span class="token tag attr-value punctuation">＂</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">thead</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag"></span><span class="token tag attr-name">行宽</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">1</span><span class="token tag attr-value punctuation">＂</span><span class="token tag"></span><span class="token tag attr-name">colspan</span><span class="token tag attr-value punctuation">＝</span><span class="token tag attr-value punctuation">＂</span><span class="token tag attr-value">3.</span><span class="token tag attr-value punctuation">＂</span><span class="token tag punctuation">></span><span class="token plain">硒</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">thead</span><span class="token tag punctuation">></span><span class="token tag punctuation"><</span><span class="token tag">tbody</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 14</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 15</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">开放</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 16</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token operator">/</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 17</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 18</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 19</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 20.</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">clickAndWait</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 21</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">链接</span><span class="token operator">＝</span><span class="token maybe-class-name">登录</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 22</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 23</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 24</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 25</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token keyword">类型</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 26</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">的名字</span><span class="token operator">＝</span><span class="token plain">登录</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 27</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">管理</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 28</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 29</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 30.</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token keyword">类型</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 31</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">的名字</span><span class="token operator">＝</span><span class="token plain">passwd</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 32</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">管理</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 33</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 34</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 35</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">clickAndWait</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 36</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain">的名字</span><span class="token operator">＝</span><span class="token plain">submit_login</span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 37</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"><</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token tag punctuation"></</span><span class="token tag">道明</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 38</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tr</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 39</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">tbody</span><span class="token tag punctuation">></span><span class="token tag punctuation"></</span><span class="token tag">表格</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 40</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">身体</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 41</div> <span class="code-line-content"><span class="token plain"></span><span class="token tag punctuation"></</span><span class="token tag">超文本标记语言</span><span class="token tag punctuation">></span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 42</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 43</div> <span class="code-line-content"><span class="token plain"></span></span> </div></code></pre> </div> <h2 id="jar-java-selenium-script">Java Selenium脚本<span title="Copy link to clipboard"></span></h2> <div data-title=""> <pre class="prism-code language-javascript"> <div class="code-header"> java<div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-javascript"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token keyword">包</span><span class="token plain">automationFramework</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">java</span><span class="token punctuation">．</span><span class="token property-access">跑龙套</span><span class="token punctuation">．</span><span class="token property-access">并发</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">TimeUnit</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">通过</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">键</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token known-class-name class-name">代理</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">WebDriver</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token property-access">铬</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">ChromeDriver</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword module">进口</span><span class="token plain">org</span><span class="token punctuation">．</span><span class="token property-access">openqa</span><span class="token punctuation">．</span><span class="token property-access">硒</span><span class="token punctuation">．</span><span class="token property-access">铬</span><span class="token punctuation">．</span><span class="token property-access maybe-class-name">ChromeOptions</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword">公共</span><span class="token plain"></span><span class="token keyword">类</span><span class="token plain"></span><span class="token class-name">TestCase</span><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword">公共</span><span class="token plain"></span><span class="token keyword">静态</span><span class="token plain"></span><span class="token keyword">无效</span><span class="token plain"></span><span class="token function">主要</span><span class="token punctuation">（</span><span class="token known-class-name class-name">字符串</span><span class="token punctuation">［</span><span class="token punctuation">］</span><span class="token plain">arg游戏</span><span class="token punctuation">）</span><span class="token plain">抛出</span><span class="token maybe-class-name">InterruptedException</span><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain"></span><span class="token maybe-class-name">ChromeOptions</span><span class="token plain">选项</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeOptions</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 14</div> <span class="code-line-content"><span class="token plain"></span><span class="token known-class-name class-name">代理</span><span class="token plain">代理</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">代理</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 15</div> <span class="code-line-content"><span class="token plain">代理</span><span class="token punctuation">．</span><span class="token method function property-access">setHttpProxy</span><span class="token punctuation">（</span><span class="token string">“127.0.0.1:32768”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 16</div> <span class="code-line-content"><span class="token plain">代理</span><span class="token punctuation">．</span><span class="token method function property-access">setSslProxy</span><span class="token punctuation">（</span><span class="token string">“127.0.0.1:32768”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 17</div> <span class="code-line-content"><span class="token plain">选项</span><span class="token punctuation">．</span><span class="token method function property-access">setProxy</span><span class="token punctuation">（</span><span class="token plain">代理</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 18</div> <span class="code-line-content"><span class="token plain"></span><span class="token maybe-class-name">WebDriver</span><span class="token plain">司机</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeDriver</span><span class="token punctuation">（</span><span class="token plain">选项</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 19</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">管理</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">超时</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">implicitlyWait</span><span class="token punctuation">（</span><span class="token number">60</span><span class="token punctuation">，</span><span class="token maybe-class-name">TimeUnit</span><span class="token punctuation">．</span><span class="token constant">秒</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 20.</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">导航</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">来</span><span class="token punctuation">（</span><span class="token string">“http://webscantest.com/login.php”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 21</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">findElement</span><span class="token punctuation">（</span><span class="token maybe-class-name">通过</span><span class="token punctuation">．</span><span class="token method function property-access">cssSelector</span><span class="token punctuation">（</span><span class="token string">“输入name =登录”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">sendKeys</span><span class="token punctuation">（</span><span class="token string">“admin”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 22</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">findElement</span><span class="token punctuation">（</span><span class="token maybe-class-name">通过</span><span class="token punctuation">．</span><span class="token method function property-access">cssSelector</span><span class="token punctuation">（</span><span class="token string">“输入(name = passwd)”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">sendKeys</span><span class="token punctuation">（</span><span class="token string">“admin”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 23</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">findElement</span><span class="token punctuation">（</span><span class="token maybe-class-name">通过</span><span class="token punctuation">．</span><span class="token method function property-access">cssSelector</span><span class="token punctuation">（</span><span class="token string">“输入(name = passwd)”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token method function property-access">sendKeys</span><span class="token punctuation">（</span><span class="token maybe-class-name">键</span><span class="token punctuation">．</span><span class="token constant">输入</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 24</div> <span class="code-line-content"><span class="token plain"></span><span class="token maybe-class-name">线程</span><span class="token punctuation">．</span><span class="token method function property-access">睡眠</span><span class="token punctuation">（</span><span class="token number">3000</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 25</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token method function property-access">辞职</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 26</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 27</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span></span> </div></code></pre> </div> <h2 id="exe-c-selenium-script">Exe - c#硒脚本<span title="Copy link to clipboard"></span></h2> <div data-title=""> <pre class="prism-code language-clike"> <div class="code-header"> csharp<div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-clike"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">使用系统</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">使用OpenQA</span><span class="token punctuation">．</span><span class="token plain">硒</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">使用OpenQA</span><span class="token punctuation">．</span><span class="token plain">硒</span><span class="token punctuation">．</span><span class="token plain">支持</span><span class="token punctuation">．</span><span class="token plain">用户界面</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">使用OpenQA</span><span class="token punctuation">．</span><span class="token plain">硒</span><span class="token punctuation">．</span><span class="token plain">铬</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ /用户名test_user</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ /密码123456</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain">名称空间Selenium_Demo</span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain">类</span><span class="token class-name">程序</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain">静态的空白</span><span class="token function">主要</span><span class="token punctuation">（</span><span class="token plain">字符串</span><span class="token punctuation">［</span><span class="token punctuation">］</span><span class="token plain">arg游戏</span><span class="token punctuation">）</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain">字符串URL</span><span class="token operator">＝</span><span class="token plain"></span><span class="token string">“http://hackazon.webscantest.com/user/login”</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 14</div> <span class="code-line-content"><span class="token plain">ChromeOptions选项</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeOptions</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 15</div> <span class="code-line-content"><span class="token plain">ChromeOptions headlessOptions</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeOptions</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 16</div> <span class="code-line-content"><span class="token plain">字符串appSpider_port</span><span class="token operator">＝</span><span class="token plain"></span><span class="token string">“32768”</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 17</div> <span class="code-line-content"><span class="token plain">代理代理</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">代理</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 18</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 19</div> <span class="code-line-content"><span class="token plain">HttpProxy</span><span class="token operator">＝</span><span class="token plain"></span><span class="token string">”127.0.0.1:“</span><span class="token plain"></span><span class="token operator">+</span><span class="token plain">appSpider_port</span><span class="token punctuation">，</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 20.</div> <span class="code-line-content"><span class="token plain">SslProxy</span><span class="token operator">＝</span><span class="token plain"></span><span class="token string">”127.0.0.1:“</span><span class="token plain"></span><span class="token operator">+</span><span class="token plain">appSpider_port</span></span> </div> <div class="token-line"> <div class="code-line-no"> 21</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 22</div> <span class="code-line-content"><span class="token plain">选项</span><span class="token punctuation">．</span><span class="token plain">代理</span><span class="token operator">＝</span><span class="token plain">代理</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 23</div> <span class="code-line-content"><span class="token plain">headlessOptions</span><span class="token punctuation">．</span><span class="token plain">代理</span><span class="token operator">＝</span><span class="token plain">代理</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 24</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">//检查登录脚本是否在appspider中运行(仅限chrome)</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 25</div> <span class="code-line-content"><span class="token plain">headlessOptions</span><span class="token punctuation">．</span><span class="token function">AddArguments</span><span class="token punctuation">（</span><span class="token string">“无头”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 26</div> <span class="code-line-content"><span class="token plain">IWebDriver司机</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeDriver</span><span class="token punctuation">（</span><span class="token plain">headlessOptions</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 27</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token plain">Url</span><span class="token operator">＝</span><span class="token plain">URL</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 28</div> <span class="code-line-content"><span class="token plain"></span><span class="token keyword">如果</span><span class="token plain"></span><span class="token punctuation">（</span><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token plain">PageSource</span><span class="token punctuation">．</span><span class="token function">=</span><span class="token punctuation">（</span><span class="token string">“< html xmlns = \“http://www.w3.org/1999/xhtml \“> <头> < /头> <身体> < /身体> < / html >”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 29</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｛</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 30.</div> <span class="code-line-content"><span class="token plain">选项</span><span class="token punctuation">．</span><span class="token plain">代理</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">零</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 31</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 32</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">辞职</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 33</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">//检查登录脚本是否在appspider中运行(仅限chrome)</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 34</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token operator">＝</span><span class="token plain"></span><span class="token keyword">新</span><span class="token plain"></span><span class="token class-name">ChromeDriver</span><span class="token punctuation">（</span><span class="token plain">选项</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 35</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token plain">Url</span><span class="token operator">＝</span><span class="token plain">URL</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 36</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">管理</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token function">超时</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">．</span><span class="token plain">ImplicitWait</span><span class="token operator">＝</span><span class="token plain">时间间隔</span><span class="token punctuation">．</span><span class="token function">FromSeconds</span><span class="token punctuation">（</span><span class="token number">60</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 37</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ / / /收集你的元素</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 38</div> <span class="code-line-content"><span class="token plain">IWebElement用户名</span><span class="token operator">＝</span><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">FindElement</span><span class="token punctuation">（</span><span class="token plain">通过</span><span class="token punctuation">．</span><span class="token function">Id</span><span class="token punctuation">（</span><span class="token string">“用户名”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 39</div> <span class="code-line-content"><span class="token plain">IWebElement密码</span><span class="token operator">＝</span><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">FindElement</span><span class="token punctuation">（</span><span class="token plain">通过</span><span class="token punctuation">．</span><span class="token function">CssSelector</span><span class="token punctuation">（</span><span class="token string">“输入(占位符= '密码']”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 40</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ / / /收集你的元素</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 41</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ / / /执行登录</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 42</div> <span class="code-line-content"><span class="token plain">用户名</span><span class="token punctuation">．</span><span class="token function">SendKeys</span><span class="token punctuation">（</span><span class="token string">“test_user”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 43</div> <span class="code-line-content"><span class="token plain">密码</span><span class="token punctuation">．</span><span class="token function">SendKeys</span><span class="token punctuation">（</span><span class="token string">“123456”</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 44</div> <span class="code-line-content"><span class="token plain">密码</span><span class="token punctuation">．</span><span class="token function">SendKeys</span><span class="token punctuation">（</span><span class="token plain">键</span><span class="token punctuation">．</span><span class="token plain">输入</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 45</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">/ / / /执行登录</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 46</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">////等待登录时出现的元素</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 47</div> <span class="code-line-content"><span class="token plain">IWebElement loggedInElement</span><span class="token operator">＝</span><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">FindElement</span><span class="token punctuation">（</span><span class="token plain">通过</span><span class="token punctuation">．</span><span class="token function">LinkText</span><span class="token punctuation">（</span><span class="token string">“注销”</span><span class="token punctuation">）</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 48</div> <span class="code-line-content"><span class="token plain"></span><span class="token comment">////等待登录时出现的元素</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 49</div> <span class="code-line-content"><span class="token plain">司机</span><span class="token punctuation">．</span><span class="token function">辞职</span><span class="token punctuation">（</span><span class="token punctuation">）</span><span class="token punctuation">；</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 50</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 51</div> <span class="code-line-content"><span class="token plain"></span><span class="token punctuation">｝</span></span> </div></code></pre> </div> <h1 id="proxy-log-authentication">代理登录身份验证<span title="Copy link to clipboard"></span></h1> <p>您可以验证到您的应用程序使用web代理工具，如<a href="//www.gcpym.com/appspider/traffic-recorder">流量记录仪</a>．使用代理工具，您可以在代理文件中记录前端应用程序和后端服务器之间的交互(例如HTTP GET和POST请求)。AppSpider可以重放这些交互以在应用程序中进行身份验证。代理日志文件有以下几种格式:</p> <ul> <li>流量文件(*.trec)</li> <li>打嗝文件(* . xml)</li> <li>帕罗斯岛文件(* . txt)</li> <li>WebScarab文件(conversationlog)</li> <li>文件(*.har)</li> <li>提琴手文件(* .saz)</li> </ul> <p>使用以下步骤对Traffic文件进行身份验证:</p> <ol> <li>打开<strong>认证>宏认证</strong>选项卡。</li> <li>选择<strong>使用代理日志(用于表单身份验证)</strong>复选框。</li> <li>如果您还没有代理文件，请使用<a href="//www.gcpym.com/appspider/traffic-recorder">流量记录仪</a>用于记录登录过程中涉及的交互的工具。</li> <li>单击<strong>省略号(…)</strong>旁边的按钮<strong>代理日志文件</strong>文本框。这将打开文件资源管理器。导航到支持的格式的代理文件并选择它。</li> <li>控件重新播放代理日志验证来测试代理日志验证<strong>测试</strong>按钮。如果身份验证成功，您将看到一个弹出窗口，显示“代理登录执行成功”。</li> </ol> <h1 id="session-hijacking">会话劫持<span title="Copy link to clipboard"></span></h1> <p>如果您的web应用程序使用会话cookie来维持登录状态，您可以捕获此cookie并使用session Hijacking方法进行认证。使用以下步骤设置此身份验证方法:</p> <ol> <li>使用浏览器的开发人员工具捕获与身份验证相关的会话cookie。</li> <li>打开<strong>认证>会话劫持(不支持重新登录)</strong>选项卡。</li> <li>选择<strong>会话劫持</strong>复选框。</li> <li>单击<strong>利用捕获的会话Cookie</strong>链接。“会话设置”窗口将出现。</li> <li>步骤1中的会话cookie<strong>会话Cookie</strong>字段。多个cookie之间用分号分隔。例如，考虑以下捕获的cookie<a href="http://webscantest.com">http://webscantest.com</a>：</li> </ol> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Screen Shot 2019-03-26 at 1.10.54 AM.png"></a> <ol start="6"> <li>如果在整个扫描过程中需要维护这些cookie值，您可以选择<strong>在扫描期间锁定cookie值</strong>复选框。属性将此设置应用于所有cookie<strong>适用于所有cookies</strong>复选框，或在表中输入特定的cookie。</li> <li>点击<strong>好吧</strong>返回“认证”界面。</li> </ol> <p>这是最不可取的身份验证方法，因为扫描器在扫描过程中丢失会话时不能重新身份验证。</p> <h1 id="oauth">OAUTH<span title="Copy link to clipboard"></span></h1> <p>OAuth (<a href="https://oauth.net/">https://oauth.net/</a>)是一种授权方法，应用程序使用它向客户端授予细粒度访问权。AppSpider支持OAuth 2.0，这是行业标准的授权协议。OAuth 2.0专注于客户端开发人员的简单性，同时为web应用程序、桌面应用程序、移动电话和客厅设备提供特定的授权流程。如果您的应用程序已授予AppSpider访问某些功能的权限，您可以在<strong>> OAUTH身份验证</strong>选项卡。当开始扫描时，AppSpider可以向您的应用程序提供这些细节，并接收访问令牌。</p> <p>根据您的用例，您将需要使用不同的OAuth流。“授予类型”属性决定了应用程序正在使用的OAuth流。你可以在此了解更多奖助金类型:<a href="https://oauth.net/2/grant-types/">https://oauth.net/2/grant-types/</a>．</p> <p>AppSpider支持以下拨款类型:</p> <ol> <li><a href="//www.gcpym.com/appspider/authentication">授权代码</a></li> <li><a href="//www.gcpym.com/appspider/authentication">隐式的</a></li> <li><a href="//www.gcpym.com/appspider/authentication">资源所有者密码凭据</a></li> <li><a href="//www.gcpym.com/appspider/authentication">客户端凭证</a></li> </ol> <p>以下图表可以帮助您为您的申请选择合适的拨款类型。</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/Grant Types chart.png"></a> <h2 id="set-up-oauth-authentication">设置OAuth认证<span title="Copy link to clipboard"></span></h2> <p>如果您想扫描使用OAuth的应用程序，您需要知道应用程序使用的授权类型。您通常可以从应用程序开发人员那里获得这些信息。如果您检查来自连接的流量，通常还可以在URL中看到授予类型。</p> <a style="cursor:pointer" title=""><img src="//www.gcpym.com/api/docs/file/product-documentation__master/appspider/images/OAUTH AppSpider.png"></a> <p>的<strong>> OAUTH身份验证</strong>屏幕有许多选项来配置应用程序的OAuth属性。您需要选择<strong>OAuth启用</strong>选项以启用OAuth身份验证，然后根据授权类型提供所需的值。</p> <ul> <li><strong>资源服务器URL</strong>- API服务器的标识符。在应用程序获得访问令牌后，资源服务器处理经过身份验证的请求</li> <li><strong>授权服务器URL</strong>-授权服务器URL，从您的身份提供者获得(参考:<a href="https://en.wikipedia.org/wiki/Identity_provider">https://en.wikipedia.org/wiki/Identity_provider</a>）</li> <li><strong>重定向的URI</strong>—授权服务器将用户重定向回的URL, URL中包含授权码或访问令牌。如果资源服务器URL为空将被使用</li> <li><strong>客户范围</strong>-一个或多个空格分隔的字符串，表示应用程序正在请求哪些权限。您使用的特定OAuth API将定义它所支持的作用域</li> <li><strong>客户机Id</strong>-从您的身份证明提供者获得的申请的公共识别码</li> <li><strong>客户的秘密</strong>-应用程序的客户端秘密，从您的身份提供者获得。这确保仅从应用程序发出获取访问令牌的请求</li> <li><strong>客户端状态</strong>—应用程序生成一个随机字符串并将其包含在请求中。然后，它应该检查用户授权应用程序后返回的值是否相同。这是用来防止CSRF攻击的</li> <li><strong>用户名</strong>—使用“资源所有者密码凭据”或“客户端凭据”授予类型时，最终用户的用户名</li> <li><strong>密码</strong>—使用“资源所有者密码凭证”或“客户端凭证”授予类型时，最终用户的密码</li> </ul> <h2 id="oauth-grant-types">OAuth格兰特类型<span title="Copy link to clipboard"></span></h2> <p>以下部分描述了根据授予类型需要向AppSpider提供哪些OAuth属性。</p> <h3 id="authorization-code">授权代码<span title="Copy link to clipboard"></span></h3> <p>授权码授权类型用于web和移动应用程序。它与大多数其他授权类型的不同之处是，首先需要应用程序启动一个浏览器来启动流程。在较高的级别上，流程有以下步骤:</p> <ul> <li>应用程序打开浏览器将用户发送到OAuth服务器</li> <li>用户看到授权提示符并批准应用程序的请求</li> <li>用户被重定向回具有查询字符串中的授权代码的应用程序</li> <li>应用程序用授权代码交换访问令牌</li> </ul> <p>授权代码流最好由源代码未公开的服务器端应用程序使用。应用程序应该是服务器端，因为交换令牌授权代码的请求需要一个客户端机密，而这个机密必须存储在您的客户端中。然而，服务器端应用程序需要终端用户，因为它依赖于与终端用户的web浏览器的交互，后者将重定向用户，然后接收授权代码。看到<a href="https://developer.okta.com/authentication-guide/auth-overview/">https://developer.okta.com/authentication-guide/auth-overview/#authorization-code-flow</a>和<a href="https://developer.okta.com/authentication-guide/implementing-authentication/auth-code">https://developer.okta.com/authentication-guide/implementing-authentication/auth-code</a>为更多的信息。</p> <h4 id="mandatory-properties">强制性的属性<span title="Copy link to clipboard"></span></h4> <ul> <li>资源服务器URL</li> <li>客户机Id</li> </ul> <h3 id="implicit">隐式的<span title="Copy link to clipboard"></span></h3> <p>隐式授权类型是一个可由公共客户端使用的简化流，其中访问令牌立即返回，而不需要额外的授权代码交换步骤。</p> <p>通常不建议使用隐式流(有些服务器完全禁止此流)。自从最初编写规范以来，行业最佳实践已经改变，建议公共客户端应该使用带有PKCE扩展的授权代码流。</p> <h4 id="mandatory-properties-1">强制性的属性<span title="Copy link to clipboard"></span></h4> <ul> <li>资源服务器URL</li> <li>客户机Id</li> </ul> <p>注意:目前还不支持PKCE</p> <h3 id="resource-owner-password-credentials">资源所有者密码凭据<span title="Copy link to clipboard"></span></h3> <p>资源所有者密码凭据授予类型适合于资源所有者与客户端具有信任关系的情况，例如设备操作系统或具有高度特权的应用程序。授权服务器在启用这种授权类型时应该特别小心，并且只在其他流不可用时才允许它。看到<a href="https://tools.ietf.org/html/rfc6749">https://tools.ietf.org/html/rfc6749#4.3</a>为更多的信息。</p> <h4 id="mandatory-properties-2">强制性的属性<span title="Copy link to clipboard"></span></h4> <ul> <li>资源服务器URL</li> <li>用户名</li> <li>密码</li> </ul> <h3 id="client-credentials">客户端凭证<span title="Copy link to clipboard"></span></h3> <p>当应用程序请求访问令牌以访问其自己的资源时(而不是代表用户)，将使用客户机凭据授予。客户端需要对这个请求进行身份验证。通常，服务将允许附加的请求参数客户端Id和客户端秘密，或者接受HTTP基本身份验证头中的客户端Id和客户端秘密。</p> <h4 id="mandatory-properties-3">强制性的属性<span title="Copy link to clipboard"></span></h4> <ul> <li>资源服务器URL</li> </ul> <h2 id="additional-oauth-properties">附加的OAuth属性<span title="Copy link to clipboard"></span></h2> <p>除了身份验证屏幕的OAuth部分中的属性外，还有一些高级选项可以帮助您配置应用程序的OAuth流。</p> <ul> <li><strong>资源所有者URL</strong>—能够授权访问受保护资源的实体。可选，在大多数情况下应该等于资源服务器URL</li> <li><strong>UsernameForm / PasswordForm</strong>-用户名和密码，用于应用程序上额外的表单认证流程</li> <li><strong>ExtensionGrant</strong>-此时可以忽略</li> <li><strong>AuthorizationGrantType</strong>-支持的拨款类型的数字表示</li> <li><strong>NeverDoBasicAuth</strong>防止AppSpider在使用“资源所有者密码凭据”或“客户端凭据”的情况下发送HTTP基本认证头(base65编码的用户名和密码值)。默认启用(值为0)</li> <li><strong>JsonPostBodies</strong>-支持JSON格式的OAuth授权服务器请求和响应</li> <li><strong>Azure</strong>* -所有在Azure开始时的属性都是过时的，不应该使用</li> <li><strong>OAuthCustomField</strong>—支持应发送到授权服务器的任何附加参数</li> </ul> <div class="block-callout info"> <h3>请注意<span title="Copy link to clipboard"></span></h3> <p>在大多数情况下，除了隐式授权类型外，可以使用宏绕过OAuth身份验证。如果你用AppSpider配置OAuth有困难，你应该试试<a href="//www.gcpym.com/appspider/authentication">宏观的身份验证</a>．</p> </div> <h2 id="ssl-certificates">SSL证书<span title="Copy link to clipboard"></span></h2> <p>您可能需要在客户端对应用程序进行身份验证，以便可以扫描在SSL后面找到的页面。这种身份验证方法可以用于云和内部扫描引擎。</p> <div class="block-callout warning"> <h3>可以证明格式<span title="Copy link to clipboard"></span></h3> <p>SSL证书必须为。pfx文件。</p> </div> <h4 id="configure-ssl-authentication">配置SSL身份验证<span title="Copy link to clipboard"></span></h4> <ol> <li>去<strong>> SSL身份验证</strong>．</li> <li>在<strong>类型</strong>下拉选择<strong>证书。</strong></li> <li>选择您的SSL .pfx文件。</li> <li>3 .可选:如果需要输入密码，请在提供的框中输入。</li> </ol> <h2 id="adal">ADAL<span title="Copy link to clipboard"></span></h2> <p>您可以使用Azure Active Directory身份验证库(ADAL)对InsightAppSec扫描进行身份验证。</p> <h4 id="configure-adal">配置ADAL<span title="Copy link to clipboard"></span></h4> <p>配置ADAL身份验证，必须进入<strong>身份验证> ADAL</strong>屏幕，并设置以下选项:</p> <ul> <li><strong>资源ID</strong>-这取决于Azure Active Directory (AD)的使用情况。如果你正在使用Azure Native AD，这应该是两个默认值之一，graph.windows.net或graph.microsoft.com。如果您没有使用原生Azure AD，您的AD管理员可能会帮助您为实例获取正确的ID。</li> <li><strong>租户</strong>—Azure AD租户的域名，例如example.onmicrosoft.com。这可以在Azure Active Directory概述屏幕上找到。</li> <li><strong>客户机ID</strong>—已注册应用程序下的应用程序(客户端)ID。</li> <li><strong>权威的URL</strong>——默认为<a href="https://login.microsoftonline.com/">https://login.microsoftonline.com/</a>如果空着，这个就会被忽略。</li> <li><strong>用户名</strong>-如果您使用客户端ID、用户名和密码认证流程，这将是您的帐户的用户名。</li> <li><strong>密码</strong>-密码不是你的用户帐户的密码，而是在“证书和秘密”部分创建的秘密密钥。您可以将ADAL与OAuth结合使用作为您的身份验证协议(参考:<a href="https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-oauth2-implicit-grant-flow">https://docs.microsoft.com/en-us/azure/active-directory/develop/v1-oauth2-implicit-grant-flow</a>)．</li> </ul> <h2 id="hmac">HMAC<span title="Copy link to clipboard"></span></h2> <p>HMAC是一个MAC(消息验证码)，它使用加密哈希函数和密钥进行验证。要了解更多关于HMAC的信息，请参见<a href="https://en.wikipedia.org/wiki/HMAC">https://en.wikipedia.org/wiki/HMAC</a>．</p> <h4 id="configure-hmac-authentication">配置HMAC身份验证,<span title="Copy link to clipboard"></span></h4> <ol> <li>去<strong>验证> HMAC</strong>．</li> <li>使用切换按钮<strong>使HMAC</strong>．</li> <li>输入如下信息:<ul> <li>用户名-哈希算法的用户名。</li> <li>秘钥-用于计算HMAC的唯一代码。发送方和接收方都知道它。</li> <li>哈希算法-选择哈希算法类型。<ul> <li>Md5</li> <li>Sha1</li> <li>Sha256</li> </ul></li> <li>头生成DLL文件名-创建的用户<a href="https://support.microsoft.com/en-us/help/815065/what-is-a-dll">DLL文件</a>，其中包含加密哈希函数。只有在使用内部引擎时才需要这样做。如果不提供文件，系统将使用引擎提供的DLL。</li> </ul></li> </ol> <h3 id="hmac-header-generation">HMAC头,代<span title="Copy link to clipboard"></span></h3> <p>随AppSpider附带的HMACHeaderGenerator.dll是用于生成HMAC头文件的默认文件。它被编码为。dll，这样想要使用自定义方案生成HMAC头文件的第三方可以为此目的编写自定义的.dll，然后配置AppSpider使用它而不是默认的HMACHeaderGenerator.dll。</p> <p>在HMAC配置扫描中，AppSpider使用HMAC .dll生成包含在它生成的每个请求中的头文件。</p> <p>以下3个数据结构是在HMAC函数中传递数据所必需的。它们被特别地编码为尽可能地简单，以最小化主进程和。dll之间的内存分配差异:</p> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">模板<typename T> struct FUNCTORIZER</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">bool (*m_pfnCompareOrOrder)(const T& o1, const T& o2); / / const const</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">inline FUNCTORIZER(bool (*pfnCompareOrOrder)(const T& o1, const T& o2)):</span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain">m_pfnCompareOrOrder (pfnCompareOrOrder)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain">内联bool操作符()(const T& o1, const T& o2)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain">返回m_pfnCompareOrOrder (o1、o2);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain">}；</span></span> </div></code></pre> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">模板<typename T> struct SIMPLELIST</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">模板<typename T> inline static void PlacementDestructor(T& p)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">p ~ T ();</span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain">SIMPLELIST < T > * m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain">T m_tObject;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain">内联SIMPLELIST T < > ():</span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain">m_plNext (nullptr)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 14</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 15</div> <span class="code-line-content"><span class="token plain">inline SIMPLELIST<T>(const SIMPLELIST<T>& o):</span></span> </div> <div class="token-line"> <div class="code-line-no"> 16</div> <span class="code-line-content"><span class="token plain">m_plNext (nullptr)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 17</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 18</div> <span class="code-line-content"><span class="token plain">运算符= (o);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 19</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 20.</div> <span class="code-line-content"><span class="token plain">inline SIMPLELIST<T>(const T& tObject):</span></span> </div> <div class="token-line"> <div class="code-line-no"> 21</div> <span class="code-line-content"><span class="token plain">m_plNext (nullptr),</span></span> </div> <div class="token-line"> <div class="code-line-no"> 22</div> <span class="code-line-content"><span class="token plain">m_tObject (tObject)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 23</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 24</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 25</div> <span class="code-line-content"><span class="token plain">内联~ SIMPLELIST T < > ()</span></span> </div> <div class="token-line"> <div class="code-line-no"> 26</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 27</div> <span class="code-line-content"><span class="token plain">重置();</span></span> </div> <div class="token-line"> <div class="code-line-no"> 28</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 29</div> <span class="code-line-content"><span class="token plain">内联空白重置()</span></span> </div> <div class="token-line"> <div class="code-line-no"> 30.</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 31</div> <span class="code-line-content"><span class="token plain">SIMPLELIST < T > * plCurrent,</span></span> </div> <div class="token-line"> <div class="code-line-no"> 32</div> <span class="code-line-content"><span class="token plain">* plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 33</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 34</div> <span class="code-line-content"><span class="token plain">plNext = m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 35</div> <span class="code-line-content"><span class="token plain">而(plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 36</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 37</div> <span class="code-line-content"><span class="token plain">plCurrent = plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 38</div> <span class="code-line-content"><span class="token plain">plNext = plCurrent - > m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 39</div> <span class="code-line-content"><span class="token plain">plCurrent - > m_plNext = nullptr;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 40</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 41</div> <span class="code-line-content"><span class="token plain">PlacementDestructor < SIMPLELIST < T > > (* plCurrent);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 42</div> <span class="code-line-content"><span class="token plain">免费(plCurrent);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 43</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 44</div> <span class="code-line-content"><span class="token plain">m_plNext = nullptr;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 45</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 46</div> <span class="code-line-content"><span class="token plain">内联SIMPLELIST < T > *第()</span></span> </div> <div class="token-line"> <div class="code-line-no"> 47</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 48</div> <span class="code-line-content"><span class="token plain">返回m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 49</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 50</div> <span class="code-line-content"><span class="token plain">内联SIMPLELIST < T > * Next ()</span></span> </div> <div class="token-line"> <div class="code-line-no"> 51</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 52</div> <span class="code-line-content"><span class="token plain">返回m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 53</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 54</div> <span class="code-line-content"><span class="token plain">内联bool添加(const T& tObjectToCopy)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 55</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 56</div> <span class="code-line-content"><span class="token plain">SIMPLELIST < T > * plThat;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 57</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 58</div> <span class="code-line-content"><span class="token plain">plThat =;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 59</div> <span class="code-line-content"><span class="token plain">而(plThat - > m_plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 60</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 61</div> <span class="code-line-content"><span class="token plain">plThat = plThat - > m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 62</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 63</div> <span class="code-line-content"><span class="token plain">plThat->m_plNext = new SIMPLELIST<T>(tObjectToCopy);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 64</div> <span class="code-line-content"><span class="token plain">如果(plThat - > m_plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 65</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 66</div> <span class="code-line-content"><span class="token plain">plThat = plThat - > m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 67</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 68</div> <span class="code-line-content"><span class="token plain">返回true;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 69</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 70</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 71</div> <span class="code-line-content"><span class="token plain">返回错误;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 72</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 73</div> <span class="code-line-content"><span class="token plain">内联T* addhead (const T& tObjectToCopy)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 74</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 75</div> <span class="code-line-content"><span class="token plain">SIMPLELIST < T > * plThat;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 76</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 77</div> <span class="code-line-content"><span class="token plain">plThat = m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 78</div> <span class="code-line-content"><span class="token plain">m_plNext = (SIMPLELIST < T > *) malloc (sizeof (SIMPLELIST < T >));</span></span> </div> <div class="token-line"> <div class="code-line-no"> 79</div> <span class="code-line-content"><span class="token plain">新(m_plNext) SIMPLELIST < T > (tObjectToCopy);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 80</div> <span class="code-line-content"><span class="token plain">如果(m_plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 81</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 82</div> <span class="code-line-content"><span class="token plain">m_plNext - > m_plNext = plThat;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 83</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 84</div> <span class="code-line-content"><span class="token plain">返回&m_plNext - > m_tObject;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 85</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 86</div> <span class="code-line-content"><span class="token plain">m_plNext = plThat;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 87</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 88</div> <span class="code-line-content"><span class="token plain">返回nullptr;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 89</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 90</div> <span class="code-line-content"><span class="token plain">内联T* AddUnique(const T& tObjectToCopy, bool (*pfnCompare)(const T& o1, const T& o2)， bool bFailIfExists = false)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 91</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 92</div> <span class="code-line-content"><span class="token plain">返回AddUnique(tObjectToCopy, FUNCTORIZER<T>(pfnCompare)， bFailIfExists);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 93</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 94</div> <span class="code-line-content"><span class="token plain">模板<typename FUNCTOR> inline T* AddUnique(const T& tObjectToCopy, FUNCTOR& pfnCompare, bool bFailIfExists = false)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 95</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 96</div> <span class="code-line-content"><span class="token plain">SIMPLELIST < T > * plThat;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 97</div> <span class="code-line-content"><span class="token plain"></span></span> </div> <div class="token-line"> <div class="code-line-no"> 98</div> <span class="code-line-content"><span class="token plain">plThat =;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 99</div> <span class="code-line-content"><span class="token plain">while (plThat->m_plNext && !pfnCompare(plThat->m_plNext->m_tObject, tObjectToCopy)))</span></span> </div> <div class="token-line"> <div class="code-line-no"> One hundred.</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 101</div> <span class="code-line-content"><span class="token plain">plThat = plThat - > m_plNext;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 102</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 103</div> <span class="code-line-content"><span class="token plain">如果(plThat - > m_plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 104</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 105</div> <span class="code-line-content"><span class="token plain">如果(! bFailIfExists)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 106</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 107</div> <span class="code-line-content"><span class="token plain">//保留旧的，返回指向它的指针。</span></span> </div> <div class="token-line"> <div class="code-line-no"> 108</div> <span class="code-line-content"><span class="token plain">返回&plThat - > m_plNext - > m_tObject;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 109</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 110</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 111</div> <span class="code-line-content"><span class="token plain">其他的</span></span> </div> <div class="token-line"> <div class="code-line-no"> 112</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 113</div> <span class="code-line-content"><span class="token plain">plThat - > m_plNext = (SIMPLELIST < T > *) malloc (sizeof (SIMPLELIST < T >));</span></span> </div> <div class="token-line"> <div class="code-line-no"> 114</div> <span class="code-line-content"><span class="token plain">新(plThat - > m_plNext) SIMPLELIST < T > (tObjectToCopy);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 115</div> <span class="code-line-content"><span class="token plain">如果(plThat - > m_plNext)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 116</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 117</div> <span class="code-line-content"><span class="token plain">返回&plThat - > m_plNext - > m_tObject;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 118</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 119</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 120</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 121</div> <span class="code-line-content"><span class="token plain">返回nullptr;</span></span> </div> <div class="token-line"> <div class="code-line-no"> 122</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 123</div> <span class="code-line-content"><span class="token plain">}；</span></span> </div></code></pre> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">struct STRINGPAIR</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">TCHAR m_szFirst [1024],</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">m_szSecond [1024];</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">// ---</span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain">STRINGPAIR ()</span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain">STRINGPAIR(LPCTSTR szFirst, LPCTSTR szSecond)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain">_tcscpy_s < sizeof (m_szFirst) / sizeof (* m_szFirst) > (m_szFirst szFirst);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain">_tcscpy_s < sizeof (m_szSecond) / sizeof (* m_szSecond) > (m_szSecond szSecond);</span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div> <div class="token-line"> <div class="code-line-no"> 14</div> <span class="code-line-content"><span class="token plain">}；</span></span> </div></code></pre> <h4 id="replacing-the-default-dll">替换默认DLL<span title="Copy link to clipboard"></span></h4> <p>以下函数必须在任何将替换默认HMACHeaderGenerator.dll的.dll中实现。</p> <h5 id="get-last-error">得到最后一个错误</h5> <p>由以下函数生成的任何向用户提供信息的错误或异常情况都应存储在一个全局变量中，并由该函数返回。AppSpider将以处理任何错误的相同方式报告错误。</p> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">extern "C" int __declspec(dllexport) WINAPI getlastmacerror (IN int nSizeofError, OUT LPSTR szError)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">// nSizeofError = szError的大小限制。</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">// szError =接收错误的字符缓冲区指针。</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div></code></pre> <h5 id="generate-header">生成头文件</h5> <p>这是生成HMAC HTTP报头的核心函数。</p> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">extern "C" bool __declspec(dllexport) WINAPI GenerateHMACHeader(IN ALG_ID ehashalgorithms, IN LPCWSTR wszHttpVerb, IN DATE dtExpireDate, IN LPCWSTR wszUrl, IN LPCWSTR wszUsername, IN LPCWSTR wszSecretKey, IN BYTE* pbtContent, IN DWORD dwContentLength, OUT SIMPLELIST<STRINGPAIR>& lpszHeaders)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">//下面是填充lpszHeaders的代码示例:</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">lpszHeaders。Add (STRINGPAIR(“CustomHMACField1”,szValue1));</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">lpszHeaders。Add (STRINGPAIR(“CustomHMACField2”,szValue2));</span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain">//如果szValue1 = "foo"和szValue2 = "bar"，则产生的HTTP请求将</span></span> </div> <div class="token-line"> <div class="code-line-no"> 7</div> <span class="code-line-content"><span class="token plain">//像这样:</span></span> </div> <div class="token-line"> <div class="code-line-no"> 8</div> <span class="code-line-content"><span class="token plain">GET / somepage.html HTTP / 1.1</span></span> </div> <div class="token-line"> <div class="code-line-no"> 9</div> <span class="code-line-content"><span class="token plain">主持人:server.example.com</span></span> </div> <div class="token-line"> <div class="code-line-no"> 10</div> <span class="code-line-content"><span class="token plain">CustomHMACField1: foo</span></span> </div> <div class="token-line"> <div class="code-line-no"> 11</div> <span class="code-line-content"><span class="token plain">CustomHMACField2:酒吧</span></span> </div> <div class="token-line"> <div class="code-line-no"> 12</div> <span class="code-line-content"><span class="token plain">< >其他头</span></span> </div> <div class="token-line"> <div class="code-line-no"> 13</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div></code></pre> <p>ALG_ID来自wincrypt.h并指定要使用的加密哈希算法。在自定义实现中，它可以是任何需要的内容，包括忽略它，例如总是使用MD5的场景。其余的输入参数在HMACHeaderGenerator.dll中以标准的HMAC方式组合，生成头文件“Authorization”和“Date”以及lpszHeaders中的值。类似地，任何自定义方案都将接受输入参数(算法、日期、字符串参数和可选的二进制内容(pbtContent、dwContentLength)，并按照自定义方法的规定组合它们，以创建lpszHeaders中所需的任意多的名称-值对，当爬行和攻击时，AppSpider会将其包含在请求头中。</p> <h5 id="clear-headers-list">一个清晰的标题列表</h5> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">extern "C" void __declspec(dllexport) WINAPI FreeTheHeadersList(IN SIMPLELIST<STRINGPAIR>& lpszHeaders)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">//使用与GenerateHMACHeader()相同的方案释放lpszHeaders</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">//分配它。可能只是lpszHeaders.Reset()。</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div></code></pre> <h5 id="generate-arbitrary-headers-not-used">生成任意头文件(未使用)</h5> <pre class="prism-code language-text"> <div class="code-header"> <div class="code-copy" title="Copy to clipboard"> <i class="r7-icon r7-icon-copy-clipboard"></i> </div> </div><code class="prism-code language-text"> <div class="token-line"> <div class="code-line-no"> 1</div> <span class="code-line-content"><span class="token plain">extern "C" bool __declspec(dllexport) WINAPI GenerateArbitraryHeaders(IN SIMPLELIST<STRINGPAIR>& lpszInputs, OUT SIMPLELIST<STRINGPAIR>& lpszHeaders)</span></span> </div> <div class="token-line"> <div class="code-line-no"> 2</div> <span class="code-line-content"><span class="token plain">｛</span></span> </div> <div class="token-line"> <div class="code-line-no"> 3.</div> <span class="code-line-content"><span class="token plain">//当前未使用此函数。这是事先写好的</span></span> </div> <div class="token-line"> <div class="code-line-no"> 4</div> <span class="code-line-content"><span class="token plain">//未来的功能。然而，存根应该包含在任何</span></span> </div> <div class="token-line"> <div class="code-line-no"> 5</div> <span class="code-line-content"><span class="token plain">//自定义HMAC .dll。</span></span> </div> <div class="token-line"> <div class="code-line-no"> 6</div> <span class="code-line-content"><span class="token plain">｝</span></span> </div></code></pre> <h2 id="advanced-settings">高级设置<span title="Copy link to clipboard"></span></h2> <p>当尝试通过身份验证扫描应用程序时，AppSpider需要一种方法来了解身份验证已经成功。它试图通过检查网页的标题和正文来推断应用程序的登录状态。Authentication > Advanced选项卡中的字段可用于训练AppSpider识别应用程序的登录状态。你可以使用<a href="//www.gcpym.com/appspider/regex-builder">正则表达式构建器</a>在AppSpider中使用正则表达式之前测试它们。</p> <ul> <li><strong>配置SSL证书link</strong>—打开SSL配置窗口，用户可以在此配置SSL证书</li> <li><strong>登录的正则表达式</strong>-如果你的页面上的文本匹配这个正则表达式，AppSpider假设你仍然登录。这个regex通常与“Sign out”链接匹配，因为Sign out选项只有在用户仍然登录时才可用。</li> <li><strong>假设好登录</strong>-有时你可能无法找到一个正则表达式匹配的登录状态的应用程序。可能有多个登录链接导致产品的不同区域，AppSpider可能尝试相同的凭证到处导致帐户锁定。您可以启用<strong>假设好登录</strong>复选框，指示AppSpider在首次登录后不检查登录状态。</li> </ul> </div> <div class="feedback "> <div class="feedback__title"> 这个页面对你有帮助吗?</div> <button class="feedback__yes flex flex-ai-c"><img src="//www.gcpym.com/Areas/Docs/includes/img/icon-thumbs-up.svg">是的</button> <button class="feedback__no flex flex-ai-c"><img src="//www.gcpym.com/Areas/Docs/includes/img/icon-thumbs-up.svg">没有</button> </div> <div class="postnav"> <a href="//www.gcpym.com/appspider/proxy-settings" class="postnav__link prev"> <div class="postnav__icon"> <i class="r7-icon r7-icon-arrow-chevron-right"></i> </div> <div class="postnav__text"> <div class="postnav__parent"> AppSpider职业</div> <div class="postnav__post"> 代理设置</div> </div></a> <a href="//www.gcpym.com/appspider/crawler-restrictions" class="postnav__link next"> <div class="postnav__text"> <div class="postnav__parent"> AppSpider职业</div> <div class="postnav__post"> 履带的限制</div> </div> <div class="postnav__icon"> <i class="r7-icon r7-icon-arrow-chevron-right"></i> </div></a> </div> </div> </div> </div> <div class="postnav-border"></div> </div> </div> <footer class="footer"> <div class="container wrapper"> <section class="footer__links"> <div class="footer__links-wrapper"> <div class="footer__links-col"> <div class="footer__links-section footer__contact"> <a href="https://www.rapid7.com"><img alt="Rapid7标志＂类＝＂logo" data-src="/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg" src="//www.gcpym.com/Areas/Docs/includes/img/r7-nav/Rapid7_logo.svg"></a> <div class="footer__links-title"> 客户支持</div> <a class="link" href="tel:1-866-390-8113">+ 1-866-390-8113(免费)</a> <div class="footer__links-title"> 销售支持</div> <a class="link" href="tel:866-772-7437">+ 1-866-772-7437(免费)</a> <div class="footer__breach"> <div class="footer__breach-title"> 需要立即帮助解决一个缺口?</div> <div class="footer__breach-contact"> <div class="footer__breach-icon"></div> <div class="footer__breach-phone"> <a href="tel:18447274347">+ 1-844-727-4347</a> </div> </div> </div> </div> <div class="footer__links-section footer__solutions"> <div class="footer__links-title"> 解决方案</div> <a class="link" href="https://www.rapid7.com/solutions">所有解决方案</a> <a class="link" href="https://www.rapid7.com/solutions/industry">行业解决方案</a> <a class="link" href="https://www.rapid7.com/solutions/compliance/">遵从性解决方案</a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__support"> <div class="footer__links-title"> 支持和资源</div> <a class="link" href="https://www.rapid7.com/for-customers">产品支持</a> <a class="link" href="https://www.rapid7.com/resources">图书馆资源</a> <a class="link" href="https://www.rapid7.com/about/customers">客户的故事</a> <a class="link" href="https://www.rapid7.com/about/events-webcasts">事件和网络广播</a> <a class="link" href="https://www.rapid7.com/services/training-certification">培训和认证</a> <a class="link" href="https://www.rapid7.com/fundamentals">IT与安全基础知识</a> <a class="link" href="https://www.rapid7.com/db">漏洞与利用数据库</a> </div> <div class="footer__links-section footer__about"> <div class="footer__links-title"> 关于我们</div> <a class="link" href="https://www.rapid7.com/about/company">公司</a> <a class="link" href="https://www.rapid7.com/about/diversity-equity-and-inclusion/">多样性、公平和包容</a> <a class="link" href="https://www.rapid7.com/about/leadership">领导</a> <a class="link" href="https://www.rapid7.com/about/news">新闻及新闻稿</a> <a class="link" href="https://www.rapid7.com/about/public-policy">公共政策</a> <a class="link" href="https://www.rapid7.com/open-source/">开源</a> <a class="link" href="https://investors.rapid7.com/">投资者</a> </div> </div> <div class="footer__links-col"> <div class="footer__links-section footer__connect"> <div class="footer__links-title"> 与我们联系</div> <a class="link" href="https://www.rapid7.com/contact">联系</a> <a class="link" href="https://blog.rapid7.com/">博客</a> <a class="link" href="https://support.rapid7.com/">支持登录</a> <a class="link" href="https://www.rapid7.com/careers">职业生涯</a> <div class="footer__links-social"> <a class="linkedin" href="https://www.linkedin.com/company/39624" target="_blank"></a> <a class="twitter" href="https://twitter.com/Rapid7" target="_blank"></a> <a class="facebook" href="https://www.facebook.com/rapid7" target="_blank"></a> <a class="instagram" href="https://www.instagram.com/rapid7/" target="_blank"></a> </div> </div> </div> </div> </section> </div> <section class="footer__legal"> <div class="container wrapper"> <div class="footer__legal-copyright"> 必威靠谱 </div> <div class="footer__legal-link"> <a href="https://www.rapid7.com/legal">法律术语</a> </div>|<div class="footer__legal-link"> <a href="https://www.rapid7.com/privacy-policy">隐私政策</a> </div>|<div class="footer__legal-link"> <a href="https://www.rapid7.com/export-notice">出口通知</a> </div>|<div class="footer__legal-link"> <a href="https://www.rapid7.com/trust">信任</a> </div> </div> </section> </footer> <div id="react_0HMCK425BFQIT"></div>  <noscript> <iframe src="https://www.gcpym.com/ns.html?id=GTM-WBTPTVC" height="0" width="0" style="display:none;visibility:hidden"></iframe> </noscript>  <div style="text-align:center;margin-bottom:5px;"><form action="http://www.baidu.com/baidu" target="_blank"><div bgcolor="#FFFFFF" style="text-align:center;"><input name="tn" type="hidden" value="baidu"><a href="http://www.baidu.com/"><img src="http://img.baidu.com/img/logo-80px.gif" width="80px" height="29px" alt="Baidu" align="bottom" border="0"></a><input type="text" name="word" size="30" placeholder="" value=""><input type="submit" value="百度搜索"></div></form></div><div id="so360" style="text-align:center;margin-bottom:5px;"><form action="https://www.so.com/" target="_blank" id="so360form"><img src="http://p1.qhimg.com/d/_onebox/search.png" width="100px" height="25px"> <input type="text" autocomplete="off" name="q" id="so360_keyword" placeholder="" value=""> <input type="submit" id="so360_submit" value="360搜索"> <input type="hidden" name="ie" value="gbk"><input type="hidden" name="src" value="zz"> <input type="hidden" name="site" value="so.com"> <input type="hidden" name="rg" value="1"></form></div><div id="sogou" style="text-align:center;margin-bottom:5px;"><form action="https://www.sogou.com/" target="_blank" id="so360form"><img src="https://www.sogou.com/web/index/images/logo_440x140.v.4.png" width="100px" height="25px"> <input type="text" autocomplete="off" name="q" id="sogou.com_keyword" placeholder="" value=""> <input type="submit" id="sogou_submit" value="搜狗"> <input type="hidden" name="ie" value="gbk"><input type="hidden" name="src" value="zz"> <input type="hidden" name="site" value="so.com"> <input type="hidden" name="rg" value="1"></form></div></body> </html>