Record scan sniffing and anti-scan sniffing

Batch sniffing
1. Knowing that the ID is self-increasing, such as http://www.aa.com/act/index.jsp?id=1&uid=1
, you can get all the
id and uid self-increasing links in batches , you can sniff out all pages of a platform and perform targeted functions. 2. Add the

encrypted string
http://www.aa.com/act/index.jsp?id=1&uid=1&secret=adkrD34ADFdak#If If

the link does not match after the secret signature, the direct verification will fail.
Of course , if the secret is decrypted, the anti-sniffing of the link will be invalid .

4. If
the link can be

released in a short time, please add the timestamp parameter to ensure that the validity of the link can be verified within the specified time.

Guess you like

Origin http://10.200.1.11:23101/article/api/json?id=326563127&siteId=291194637