一句话POC之5分钟登录后台

cat urls.txt | qsreplace "?admin=true" | gau | phpggc | anew | kxss | awk  -v  -q txt | sed 's/http/nhttp/g' | grep ^http | sed 's/(^http[^ <]*)(.*)/1/g' | grep -vi -e dalfox -e lElLxtainw| sort -u | waybackurls

poc来源网络，真伪自辫，作者称用这个tip，刷了20500美元的漏洞奖励。

P.S. 

gau: https://github.com/lc/gau

phpggc: https://github.com/ambionics/phpggc

anew: https://github.com/tomnomnom/anew

kxss: https://github.com/Emoe/kxss

waybackurls: https://github.com/tomnomnom/waybackurls