- 扫描 ID:
- 39160a00-014a-4722-b4de-e20d8355c47e已完成
- 提交的 URL:
- https://waf.cumulusfire.net/
- 报告完成时间:
链接 · 找到 6 个
从页面中识别出的传出链接
链接 | 文本 |
---|---|
https://developers.cloudflare.com/waf/ | here |
https://cumulusfire.net | Back to CumulusFire |
https://www.cloudflare.com/privacypolicy/ | Privacy Policy |
https://www.cloudflare.com/website-terms/ | Terms of Use |
https://www.cloudflare.com/abuse/ | Trust& Safety |
https://www.cloudflare.com/trademark/ | Trademark |
JavaScript 变量 · 找到 3 个
在页面窗口对象上加载的全局 JavaScript 变量是在函数外部声明的变量,可以从当前范围内的代码中的任何位置访问
名称 | 类型 |
---|---|
onbeforetoggle | object |
documentPictureInPicture | object |
onscrollend | object |
控制台日志消息 · 找到 0 条
记录到 Web 控制台的消息
HTML
页面的原始 HTML 正文
<html><head>
<meta charset="utf-8">
<title>CumulusFire</title>
<link rel="shortcut icon" type="image/x-icon" href="https://storage.googleapis.com/cumulusfire_greeting/img/favicon.ico">
<link rel="stylesheet" type="text/css" href="https://storage.googleapis.com/cumulusfire_greeting/img/layout.css">
</head>
<body>
<h1> Welcome WAF Tester </h1>
<ul>
<li> The Cloudflare Web Application Firewall (Cloudflare WAF) checks incoming web and API requests and filters undesired traffic based on sets of rules called rulesets.</li>
<li> Learn more about the product <a href="https://developers.cloudflare.com/waf/">here</a> </li>
</ul>
<h3> Query parameter names for XSS</h3>
<ul>
<li> XSS in HTML context - <a href="/?globalHtml=payload">?globalHtml=payload</a> </li>
<li> XSS in HTML attribute context - <a href="?attributeHtml=payload">?attributeHtml=payload</a> </li>
</ul>
<h3> Mandatory Requirement </h3>
<ul>
<li> Test report should clearly show evidence of bypass </li>
<li> Example: for XSS bypass, you must execute arbitrary Javascript. This means an alert(1) pop-up at minumum.</li>
</ul>
<div>
</div>
<div>
<input type="text" value="">
</div>
<footer class="footer">
<div class="main-footer__container">
<div class="main-footer__menu_bottom">
<div class="main-footer__menu_bottom__container">
<div class="main-footer__menu_bottom__copyright">
<span>© 2019 Cloudflare, Inc.</span>
<div align="left">
<a href="https://cumulusfire.net">Back to CumulusFire</a>
</div>
<div>
<a href="https://www.cloudflare.com/privacypolicy/">Privacy Policy</a>
<a href="https://www.cloudflare.com/website-terms/">Terms of Use</a>
<a href="https://www.cloudflare.com/abuse/">Trust & Safety</a>
<a href="https://www.cloudflare.com/trademark/">Trademark</a>
</div>
</div>
</div>
</div>
</div>
</footer>
</body></html>