> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/hacking-tools/web/web-recon-and-bypass-resources.md).

# Web 侦察与绕过资源

用于模糊测试、分析、载荷参考、WAF 检测、WAF 绕过和 HackTricks Web 工具的 Web 侦察与绕过资源。

使用这些资源进行 Web 表面发现、技术画像、载荷研究、WAF 检测、WAF 绕过参考，以及快速概念验证支持。

## 工具与资源

<table data-card-size="large" data-column-title-hidden data-view="cards" data-full-width="false" data-search="false"><thead><tr><th>名称</th><th>描述</th><th data-type="content-ref">官方链接</th><th data-hidden data-card-cover data-type="image">封面图片</th></tr></thead><tbody><tr><td><strong>Web 模糊测试</strong></td><td>用于发现隐藏目录、文件、参数和暴露资源的内部方法论。</td><td><a href="/zh/reconnaissance/web-fuzzing.md">Web 模糊测试</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-ae48da319b179a5ff00e8c89406ae1c210dcfbc1%2Fimage%20(1079).png?alt=media">image (1079).png</a></td></tr><tr><td><strong>Web 分析</strong></td><td>用于识别技术、框架、CMS、服务器和暴露版本的内部方法论。</td><td><a href="/zh/reconnaissance/web-profiling.md">Web 指纹识别</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-c93cea9164506f7d5c0ea3c149f0700d0b1fc656%2Fimage%20(2).png?alt=media">image (2).png</a></td></tr><tr><td><strong>子域</strong></td><td>通过被动、主动和公共来源技术发现子域名的内部方法论。</td><td><a href="/zh/reconnaissance/subdomains.md">子域名</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-8328e604e4ae19cf5906f773edee30fbad7d96b9%2Fimage.avif?alt=media">image.avif</a></td></tr><tr><td><strong>Google Dorking</strong></td><td>用于查找被索引文件、暴露面板、备份和公开 Web 资料的内部方法论。</td><td><a href="/zh/reconnaissance/google-dorking.md">Google 高级语法搜寻</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-e5ba3b471827003b80f59d30434fa77179520f8c%2Fimage%20(1).avif?alt=media">image (1).avif</a></td></tr><tr><td><strong>PayloadsAllTheThings</strong></td><td>包含载荷示例和安全测试方法论说明的参考仓库。</td><td><a href="https://github.com/swisskyrepo/PayloadsAllTheThings">https://github.com/swisskyrepo/PayloadsAllTheThings</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-a01328a4467121961784bcd71a58ea85ae7be7fc%2Fbanner.png?alt=media">banner.png</a></td></tr><tr><td><strong>RevShells</strong></td><td>用于受控实验室和评估流程的反向 Shell 载荷生成器和参考页面。</td><td><a href="https://www.revshells.com/">https://www.revshells.com/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-0cc569efa843f0d77edbcce0b459f926efa9c924%2FScreenshot%202026-07-20%20171524.png?alt=media">Screenshot 2026-07-20 171524.png</a></td></tr><tr><td><strong>WAFW00F</strong></td><td>检测并识别保护目标 Web 服务的 Web 应用防火墙。</td><td><a href="https://github.com/EnableSecurity/wafw00f">https://github.com/EnableSecurity/wafw00f</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-69b2fa71b37dd19228d27781b333e1758c77fd15%2F68747470733a2f2f692e696d6775722e636f6d2f7541677034396f2e706e67.png?alt=media">68747470733a2f2f692e696d6775722e636f6d2f7541677034396f2e706e67.png</a></td></tr><tr><td><strong>Nemesida WAF 绕过</strong></td><td>专注于 WAF 绕过参考和载荷示例的仓库。</td><td><a href="https://github.com/nemesida-waf/waf-bypass">https://github.com/nemesida-waf/waf-bypass</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-633b2d816cc15d0d9877855994a97c8cd682dd04%2F380076810-7b0034f8-34bc-4b4f-9e7a-516d804c7ccf.png?alt=media">380076810-7b0034f8-34bc-4b4f-9e7a-516d804c7ccf.png</a></td></tr><tr><td><strong>waf-bypass.com</strong></td><td>WAF 绕过载荷和示例的在线参考。</td><td><a href="https://waf-bypass.com/">https://waf-bypass.com/</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-d4d8b26e0406d9f441823564af9e6053fde7f7e7%2FScreenshot%202026-07-20%20171731.png?alt=media">Screenshot 2026-07-20 171731.png</a></td></tr><tr><td><strong>HackTricks 点击劫持概念验证</strong></td><td>用于生成点击劫持概念验证页面的 Web 工具。</td><td><a href="https://tools.hacktricks.wiki/clickjacking-poc/index.html">https://tools.hacktricks.wiki/clickjacking-poc/index.html</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-0c1144dc98d5c7b1a7e4da5367fa67bab61992f2%2FScreenshot%202026-07-20%20171926.png?alt=media">Screenshot 2026-07-20 171926.png</a></td></tr><tr><td><strong>HackTricks 域配置分析器</strong></td><td>用于审查域相关配置的 Web 工具。</td><td><a href="https://tools.hacktricks.wiki/domain-config/index.html">https://tools.hacktricks.wiki/domain-config/index.html</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-65b88de3137db500cd17783b7277d230b8535b95%2FScreenshot%202026-07-20%20172030.png?alt=media">Screenshot 2026-07-20 172030.png</a></td></tr><tr><td><strong>HackTricks GitHub 泄露</strong></td><td>用于查找潜在 GitHub 暴露指标的 Web 工具。</td><td><a href="https://tools.hacktricks.wiki/github-leaks/index.html">https://tools.hacktricks.wiki/github-leaks/index.html</a></td><td><a href="https://1574813340-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2Fl4EVJpcOrsgjSGsLI7p2%2Fuploads%2Fgit-blob-bf2e65458b065fac1400a98045ca7dc8925610f8%2FScreenshot%202026-07-20%20172104.png?alt=media">Screenshot 2026-07-20 172104.png</a></td></tr></tbody></table>


---

# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.

## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.

Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:

```
GET https://hacking-notes.jord4n.pro/zh/hacking-tools/web/web-recon-and-bypass-resources.md?ask=<question>&goal=<user_goal>
```

`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.

The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.