[option]

enable.fs=no ; <short: -f> <noargv> Allow the access to the filesystem, such as to upload files, delete files, etc.
enable.shell=no ; <short: -x> <noargv> Enable the webshell.
enable.root=no ; <short: -r> <noargv> Allow traversal of all system directories.
port=9090 ; <short: -p> Specify the server port.
silent=no ; <short: -s> <noargv> Silent mode.
prefix= ; Specify the prefix of the request path, which is useful in the case of multiple services.

secure.channel.serve=no ; <short: -ss> <noargv> Enable the secure channel server.
secure.channel.server.occupy=no ; <short: -so> <noargv> Use the secure channel as an interceptor, in other words, the server only accepts requests from secure channel clients.
secure.channel.mask=the-walker-toolkit-xxxxxxx ; <short: -m> Transfer mask.
secure.channel.trusts= ; <short: -k> Trusted public key list file path. e.g. /path/to/trusts.txt
secure.channel.key= ; <short: -k1> The keypair file of the current side.
secure.channel.forward=* ; <short: -t> A list of addresses that can be forwarded. e.g. *.local,*.baidu.com
secure.channel.block= ; <short: -b> A list of addresses that should be blocked. e.g. *.xx.com
secure.channel.client.connect= ; <short: -L> Specify the remote address. e.g. ws://192.168.22.221:23322/thewalkertoolkit/transfer/secureChannel

[enc]
encrypt.password= ; <required> <short: -ep> Password.
encrypt.decrypt=no ; <short: -ex> <noargv> Decryption mode. Default is encryption mode.
encrypt.file=; <required> <short: -ef> Target filename.


[gen-key]
gen.type= ; <required> <short: -gt> Specifiy the key type. The following options are valid: ca, keypair, trusts
gen.valid.days=90 ; <short: -ge> The valid days of the generated key file.
gen.output= ; <required> <short: -go> The output file path of the generated key file.
gen.from= ; <short: -gi> The required certificate authority files. e.g. --gen-from=xx1.ca,xx2.ca