farai 0.2.0 → 0.2.1
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
package/package.json
CHANGED
|
@@ -9,7 +9,7 @@ When a target service speaks something other than plain HTTP (a legacy or custom
|
|
|
9
9
|
e.g. LPD, a proprietary binary protocol, etc.), trial-and-error against the full exploit is slow
|
|
10
10
|
and confusing. Work bottom-up instead:
|
|
11
11
|
|
|
12
|
-
1. **read the spec first.** look up the RFC or protocol documentation (`
|
|
12
|
+
1. **read the spec first.** look up the RFC or protocol documentation (`internet_search`, `internet_fetch`, or `http_request`)
|
|
13
13
|
before writing any code — legacy protocols usually have a short, precise spec (e.g. RFC 1179
|
|
14
14
|
for LPD) that tells you the exact byte sequence/framing expected, far faster than guessing.
|
|
15
15
|
2. **build the smallest possible reproducer.** write a minimal script that performs just the
|
|
@@ -13,6 +13,6 @@ description: How to search for and validate public exploits with the exploit_sea
|
|
|
13
13
|
- Prefer the smallest, most targeted PoC over a fully-weaponized Metasploit module when you just
|
|
14
14
|
need to confirm a vulnerability exists — easier to reason about and adapt if it doesn't work
|
|
15
15
|
out of the box.
|
|
16
|
-
- If no local exploit-db entry matches, fall back to `
|
|
16
|
+
- If no local exploit-db entry matches, fall back to `internet_search`/`internet_fetch` for the CVE/product
|
|
17
17
|
name — public writeups often show the exact working payload for CTF-style intentionally
|
|
18
18
|
vulnerable services (which are frequently older/unpatched versions on purpose).
|