Making a Web honeypot scanner from scratch (3) - luozhonghua2000's Blog - CSDN Blog
Open a honeypot:
View source code:
This ./js/portraitjs is very attractive, click to have a look
Obviously it has been confused, combined with semantic understanding, this is portrait=portrait, then you can boldly guess that this ison is used for hacker portraits. If you guess, you need to verify it. Here, a requested api is captured in the console- api.ip.sb, search globally after crawling:
It is found that this interface exists in line 305 of this file, which affirms our conjecture. So let's take a look at what this page looks like: