mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-23 11:41:53 +08:00
refactor: 合并 fileinfo 和 dcinfo 到 systeminfo
- fileinfo 的敏感文件扫描合并到 systeminfo - dcinfo 的域控信息收集合并到 systeminfo,通过 build tag 隔离平台差异 - 检测到域环境时自动触发域信息收集,WORKGROUP 环境自动跳过 - 新增 systeminfo_dc_windows.go 和 systeminfo_dc_other.go 处理跨平台编译
This commit is contained in:
+30
-12
@@ -595,18 +595,6 @@ forwardshell_read_failed:
|
||||
winstartup_success:
|
||||
other: "Windows startup folder persistence completed: {{.Arg1}} methods"
|
||||
|
||||
# File info
|
||||
fileinfo_sensitive:
|
||||
other: "Found sensitive file: {{.Arg1}}"
|
||||
fileinfo_potential:
|
||||
other: "Found potentially sensitive file: {{.Arg1}}"
|
||||
|
||||
# DC info
|
||||
dcinfo_not_joined:
|
||||
other: "Current computer is not joined to a domain"
|
||||
dcinfo_success:
|
||||
other: "Domain controller info collection completed: {{.Arg1}} categories succeeded"
|
||||
|
||||
# Windows service
|
||||
winservice_success:
|
||||
other: "Windows service persistence completed: {{.Arg1}} items"
|
||||
@@ -704,6 +692,36 @@ systeminfo_macos_detail:
|
||||
other: "macOS: {{.Arg1}}"
|
||||
systeminfo_sensitive_env:
|
||||
other: "Sensitive Env Var: {{.Arg1}}={{.Arg2}}"
|
||||
systeminfo_sensitive_file:
|
||||
other: "Sensitive File: {{.Arg1}}"
|
||||
systeminfo_dc_detected:
|
||||
other: "Domain detected: {{.Arg1}}"
|
||||
systeminfo_dc_connect_failed:
|
||||
other: "Domain controller connection failed: {{.Arg1}}"
|
||||
systeminfo_dc_basedn:
|
||||
other: "Domain Base DN: {{.Arg1}}"
|
||||
systeminfo_dc_created:
|
||||
other: "Domain created: {{.Arg1}}"
|
||||
systeminfo_dc_func_level:
|
||||
other: "Domain functional level: {{.Arg1}}"
|
||||
systeminfo_dc_controllers:
|
||||
other: "Domain controllers: {{.Arg1}}"
|
||||
systeminfo_dc_controller_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}}) {{.Arg3}}"
|
||||
systeminfo_dc_admins:
|
||||
other: "Domain admins: {{.Arg1}}"
|
||||
systeminfo_dc_admin_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}})"
|
||||
systeminfo_dc_users:
|
||||
other: "Domain users: {{.Arg1}}"
|
||||
systeminfo_dc_computers:
|
||||
other: "Domain computers: {{.Arg1}}"
|
||||
systeminfo_dc_computer_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}})"
|
||||
systeminfo_dc_gpos:
|
||||
other: "Group policies: {{.Arg1}}"
|
||||
systeminfo_dc_gpo_detail:
|
||||
other: " - {{.Arg1}} [{{.Arg2}}]"
|
||||
|
||||
# Windows scheduled task
|
||||
winschtask_success:
|
||||
|
||||
+30
-12
@@ -594,18 +594,6 @@ forwardshell_read_failed:
|
||||
winstartup_success:
|
||||
other: "Windows启动文件夹持久化完成: {{.Arg1}}个方法"
|
||||
|
||||
# 文件信息
|
||||
fileinfo_sensitive:
|
||||
other: "发现敏感文件: {{.Arg1}}"
|
||||
fileinfo_potential:
|
||||
other: "发现潜在敏感文件: {{.Arg1}}"
|
||||
|
||||
# 域控信息
|
||||
dcinfo_not_joined:
|
||||
other: "当前计算机未加入域环境"
|
||||
dcinfo_success:
|
||||
other: "域控制器信息收集完成: {{.Arg1}}个类别成功"
|
||||
|
||||
# Windows服务
|
||||
winservice_success:
|
||||
other: "Windows服务持久化完成: {{.Arg1}}个项目"
|
||||
@@ -703,6 +691,36 @@ systeminfo_macos_detail:
|
||||
other: "macOS: {{.Arg1}}"
|
||||
systeminfo_sensitive_env:
|
||||
other: "敏感环境变量: {{.Arg1}}={{.Arg2}}"
|
||||
systeminfo_sensitive_file:
|
||||
other: "敏感文件: {{.Arg1}}"
|
||||
systeminfo_dc_detected:
|
||||
other: "检测到域环境: {{.Arg1}}"
|
||||
systeminfo_dc_connect_failed:
|
||||
other: "域控连接失败: {{.Arg1}}"
|
||||
systeminfo_dc_basedn:
|
||||
other: "域 Base DN: {{.Arg1}}"
|
||||
systeminfo_dc_created:
|
||||
other: "域创建时间: {{.Arg1}}"
|
||||
systeminfo_dc_func_level:
|
||||
other: "域功能级别: {{.Arg1}}"
|
||||
systeminfo_dc_controllers:
|
||||
other: "域控制器: {{.Arg1}}个"
|
||||
systeminfo_dc_controller_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}}) {{.Arg3}}"
|
||||
systeminfo_dc_admins:
|
||||
other: "域管理员: {{.Arg1}}个"
|
||||
systeminfo_dc_admin_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}})"
|
||||
systeminfo_dc_users:
|
||||
other: "域用户数: {{.Arg1}}"
|
||||
systeminfo_dc_computers:
|
||||
other: "域计算机数: {{.Arg1}}"
|
||||
systeminfo_dc_computer_detail:
|
||||
other: " - {{.Arg1}} ({{.Arg2}})"
|
||||
systeminfo_dc_gpos:
|
||||
other: "组策略: {{.Arg1}}个"
|
||||
systeminfo_dc_gpo_detail:
|
||||
other: " - {{.Arg1}} [{{.Arg2}}]"
|
||||
|
||||
# Windows计划任务
|
||||
winschtask_success:
|
||||
|
||||
Reference in New Issue
Block a user