{"action":"created","issue":{"url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/2","repository_url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework","labels_url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/2/labels{/name}","comments_url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/2/comments","events_url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/2/events","html_url":"https://github.com/WangYihang/Attack_Defense_Framework/issues/2","id":276930624,"number":2,"title":"port-forwarding-change-flag.py可以被绕过","user":{"login":"lxh1201","id":19224417,"avatar_url":"https://avatars1.githubusercontent.com/u/19224417?v=4","gravatar_id":"","url":"https://api.github.com/users/lxh1201","html_url":"https://github.com/lxh1201","followers_url":"https://api.github.com/users/lxh1201/followers","following_url":"https://api.github.com/users/lxh1201/following{/other_user}","gists_url":"https://api.github.com/users/lxh1201/gists{/gist_id}","starred_url":"https://api.github.com/users/lxh1201/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/lxh1201/subscriptions","organizations_url":"https://api.github.com/users/lxh1201/orgs","repos_url":"https://api.github.com/users/lxh1201/repos","events_url":"https://api.github.com/users/lxh1201/events{/privacy}","received_events_url":"https://api.github.com/users/lxh1201/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2017-11-27T08:04:24Z","updated_at":"2017-11-29T08:02:44Z","closed_at":"2017-11-27T08:09:36Z","author_association":"NONE","body":"port-forwarding-change-flag.py只检验了base64，但是可以被base32绕过，建议添加base32检查。"},"comment":{"url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/comments/347781971","html_url":"https://github.com/WangYihang/Attack_Defense_Framework/issues/2#issuecomment-347781971","issue_url":"https://api.github.com/repos/WangYihang/Attack_Defense_Framework/issues/2","id":347781971,"user":{"login":"WangYihang","id":16917636,"avatar_url":"https://avatars0.githubusercontent.com/u/16917636?v=4","gravatar_id":"","url":"https://api.github.com/users/WangYihang","html_url":"https://github.com/WangYihang","followers_url":"https://api.github.com/users/WangYihang/followers","following_url":"https://api.github.com/users/WangYihang/following{/other_user}","gists_url":"https://api.github.com/users/WangYihang/gists{/gist_id}","starred_url":"https://api.github.com/users/WangYihang/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/WangYihang/subscriptions","organizations_url":"https://api.github.com/users/WangYihang/orgs","repos_url":"https://api.github.com/users/WangYihang/repos","events_url":"https://api.github.com/users/WangYihang/events{/privacy}","received_events_url":"https://api.github.com/users/WangYihang/received_events","type":"User","site_admin":false},"created_at":"2017-11-29T08:02:44Z","updated_at":"2017-11-29T08:02:44Z","author_association":"OWNER","body":"对的 , 关于如何检测 flag 被窃取确实是一个比较困难的问题 , 如果规则设置的多一些严格一些 , 就会非常影响性能 , 但是如果规则不全 , 就有可能被很轻易的绕过 , 就和 waf / 基于特征码的杀毒引擎 一样 , 不被绕过的前提就是对方不知道你是如何检测和过滤的 , 一旦被攻击者得知过滤规则 , 那么绕过就很容易了 , 这个问题确实很棘手 , 几乎不可能两全其美 , 所以只好先牺牲准确性了 , 本来这个框架只是内部使用 , 有些东西开源就失去了意义 , 哈哈 , 感谢关注"}}
{"actor":{"display_login":"WangYihang"}}