fix: 修复 socks5proxy/cleaner/minidump 三个插件问题

- socks5proxy: 监听地址从 127.0.0.1 改为 0.0.0.0,允许外部连接
- cleaner: 重写清理逻辑,精准匹配 fscan 产物,修复 glob 遍历大目录卡死问题,
  history 清理改为真正删除 fscan 相关行
- minidump: SeDebugPrivilege 提升失败时直接退出,不再卡 120 秒超时
This commit is contained in:
ZacharyZcR
2026-05-16 03:17:44 +08:00
parent 5af8682d22
commit 231563e82b
3 changed files with 83 additions and 207 deletions
+7 -3
View File
@@ -143,10 +143,14 @@ func (p *MiniDumpPlugin) Scan(ctx context.Context, info *common.HostInfo, sessio
// 提升权限
output.WriteString("正在提升SeDebugPrivilege权限...\n")
if privErr := pm.elevatePrivileges(); privErr != nil {
output.WriteString(fmt.Sprintf("权限提升失败: %v (尝试继续执行)\n", privErr))
} else {
output.WriteString("✓ 权限提升成功\n")
output.WriteString(fmt.Sprintf("权限提升失败: %v\n", privErr))
return &plugins.Result{
Success: false,
Output: output.String(),
Error: fmt.Errorf("SeDebugPrivilege 提升失败: %w", privErr),
}
}
output.WriteString("✓ 权限提升成功\n")
// 创建转储文件
outputPath := filepath.Join(".", fmt.Sprintf("lsass-%d.dmp", pid))