From 2f7d2d49c61d0f4cfa66be00f50b5e1dcbbd86dd Mon Sep 17 00:00:00 2001
From: ZacharyZcR <zacharyzcr1984@gmail.com>
Date: Sun, 14 Jun 2026 23:58:56 +0800
Subject: [PATCH] =?UTF-8?q?fix:=20redis=20exploit=20=E8=B6=85=E6=97=B6?=
 =?UTF-8?q?=E6=94=B9=E7=94=A8=E9=85=8D=E7=BD=AE=E5=80=BC=20&=20=E6=B8=85?=
 =?UTF-8?q?=E7=90=86=E6=AD=BB=E4=BB=A3=E7=A0=81?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

- redis exploit 硬编码 30s deadline 改为 config.ModuleTimeout()，与同文件其他超时一致
- 删除 BaseScanStrategy.LogPluginInfo 残留死代码（全是空操作）
- .gitignore 补充 fscan_cli/fscan_web/embed-agent 构建产物
---
 .gitignore                 |  3 +++
 core/base_scan_strategy.go | 22 ++--------------------
 plugins/services/redis.go  |  2 +-
 3 files changed, 6 insertions(+), 21 deletions(-)

diff --git a/.gitignore b/.gitignore
index 66c0f15..9ef7e6c 100644
--- a/.gitignore
+++ b/.gitignore
@@ -58,6 +58,9 @@ bin/
 *.dll
 *.so
 *.dylib
+/fscan_cli
+/fscan_web
+/embed-agent
 
 # Web UI build / Web前端构建
 web-ui/node_modules/
diff --git a/core/base_scan_strategy.go b/core/base_scan_strategy.go
index 231d17b..87c992a 100644
--- a/core/base_scan_strategy.go
+++ b/core/base_scan_strategy.go
@@ -203,27 +203,9 @@ func (b *BaseScanStrategy) isPluginPassesFilterType(pluginName string, isCustomM
 	}
 }
 
-// LogPluginInfo 输出插件信息
+// LogPluginInfo 默认不输出插件信息（service 默认端口模式有意保持安静，减少干扰）。
+// 子类 LocalScanStrategy / ServiceScanStrategy 按需重写。
 func (b *BaseScanStrategy) LogPluginInfo(config *common.Config, session *common.ScanSession) {
-	allPlugins, isCustomMode := b.GetPlugins(config)
-
-	var prefix string
-	switch b.filterType {
-	case FilterLocal:
-		prefix = i18n.GetText("concurrency_local_plugin")
-	case FilterService:
-		prefix = i18n.GetText("concurrency_service_plugin")
-	case FilterWeb:
-		prefix = i18n.GetText("concurrency_web_plugin")
-	default:
-		prefix = i18n.GetText("concurrency_plugin")
-	}
-
-	// 插件信息不再输出，减少干扰
-	_ = allPlugins
-	_ = isCustomMode
-	_ = prefix
-	_ = session
 }
 
 // formatPluginList 格式化插件列表（超过5个时精简显示）
diff --git a/plugins/services/redis.go b/plugins/services/redis.go
index 75fc62a..34b9d4c 100644
--- a/plugins/services/redis.go
+++ b/plugins/services/redis.go
@@ -325,7 +325,7 @@ func (p *RedisPlugin) exploit(ctx context.Context, info *common.HostInfo, conn n
 		return
 	}
 
-	_ = conn.SetDeadline(time.Now().Add(30 * time.Second))
+	_ = conn.SetDeadline(time.Now().Add(config.ModuleTimeout()))
 
 	dbfilename, dir, err := p.getConfig(conn)
 	if err != nil {