[Utilizing the Fofa sweep, what exactly is its primary underlying logic? I believe that some people have this kind of doubt, the logic is actually very simple, familiar with the various derivative projects on Github, find the corresponding details of the point, use its characteristics to start sweeping. There is nothing else with gold content, and the hard part is in the accumulation.]

In fact things like the above are still just the tip of the iceberg, then again we can use these things to sweep subscriptions, taking clash as an example, common configuration information contains the following:

1
proxies:
2
  - name: cc-Hysteria2
3
    type: hysteria2
4
    server: xxx.xxx.xx.xxx
5
    port: 30000
6
    password: fadsfaf
7
    sni: www.bing.com
8
    skip-cert-verify: true

Well, it works if you know how to capture characteristic points, like (Fofa):

xxxxxxxxxx
1
1
body='type: hysteria2'

in the 360 web mapping space:

xxxxxxxxxx
1
1
response:"'type': 'hysteria2'"

Remember when I posted a table of airports? ~ (I'd like to have a copy sent to me when it's complete, please ~)

The second explanation: proxy pool crawler project are used in the same open source project, and these open source projects have common features , as long as the search feature word can be retrieved . Such as this open source project:Zoupers/proxy-poolWithin the code is this API presentation page code：Api/ProxyApi.py Searching for body="get all proxies from proxy pool" identified API interface pages that contained this trope. Switching to body="get an usable proxy" also finds some servers that match this type of item~.

<OVER~>