diff --git a/common/logger.go b/common/logger.go index 600147d..4751ab9 100644 --- a/common/logger.go +++ b/common/logger.go @@ -72,8 +72,11 @@ func LogBase(msg string) { getGlobalLogger().Base(msg) } // LogInfo 输出信息日志 func LogInfo(msg string) { getGlobalLogger().Info(msg) } -// LogSuccess 输出成功日志 +// LogSuccess 输出成功日志（Web指纹等） func LogSuccess(result string) { getGlobalLogger().Success(result) } +// LogVuln 输出漏洞/重要发现日志（密码成功、漏洞等） +func LogVuln(result string) { getGlobalLogger().Vuln(result) } + // LogError 输出错误日志 func LogError(errMsg string) { getGlobalLogger().Error(errMsg) } diff --git a/common/logging/constants.go b/common/logging/constants.go index 0399cbf..41a85cc 100644 --- a/common/logging/constants.go +++ b/common/logging/constants.go @@ -25,7 +25,8 @@ const ( LevelError LogLevel = "ERROR" // 仅显示错误日志 LevelBase LogLevel = "BASE" // 仅显示基础信息日志 LevelInfo LogLevel = "INFO" // 仅显示信息日志 - LevelSuccess LogLevel = "SUCCESS" // 仅显示成功日志 + LevelSuccess LogLevel = "SUCCESS" // 仅显示成功日志（Web指纹等） + LevelVuln LogLevel = "VULN" // 漏洞和重要发现（密码成功、漏洞等） LevelDebug LogLevel = "DEBUG" // 仅显示调试日志 LevelInfoSuccess LogLevel = "INFO_SUCCESS" // 仅显示信息和成功日志 LevelBaseInfoSuccess LogLevel = "BASE_INFO_SUCCESS" // 显示基础、信息和成功日志 @@ -57,6 +58,8 @@ const ( const ( // PrefixSuccess 成功日志前缀 PrefixSuccess = "[+]" + // PrefixVuln 漏洞/重要发现前缀 + PrefixVuln = "[!]" // PrefixInfo 信息日志前缀 PrefixInfo = "[*]" // PrefixError 错误日志前缀 @@ -87,10 +90,11 @@ const ( // GetDefaultLevelColors 获取默认的日志级别颜色映射 func GetDefaultLevelColors() map[LogLevel]interface{} { return map[LogLevel]interface{}{ - LevelError: color.FgRed, // 错误日志显示红色（危险/错误） - LevelBase: color.FgYellow, // 基础日志显示黄色（警告/提示） - LevelInfo: color.FgCyan, // 信息日志显示青色（中性信息） - LevelSuccess: color.FgGreen, // 成功日志显示绿色（成功/通过） - LevelDebug: color.FgWhite, // 调试日志显示白色（详细信息） + LevelError: color.FgRed, // 错误日志显示红色 + LevelVuln: color.FgRed, // 漏洞/重要发现显示红色（密码成功、漏洞等） + LevelBase: color.FgWhite, // 基础日志显示白色（普通信息） + LevelInfo: color.FgWhite, // 信息日志显示白色（普通信息） + LevelSuccess: color.FgGreen, // 成功日志显示绿色（Web指纹等） + LevelDebug: color.FgWhite, // 调试日志显示白色 } } diff --git a/common/logging/logger.go b/common/logging/logger.go index 8a1b05a..376daaa 100644 --- a/common/logging/logger.go +++ b/common/logging/logger.go @@ -95,6 +95,11 @@ func (l *Logger) Success(msg string) { l.log(LevelSuccess, msg) } +// Vuln 输出漏洞/重要发现信息 +func (l *Logger) Vuln(msg string) { + l.log(LevelVuln, msg) +} + // Error 输出错误信息 func (l *Logger) Error(msg string) { l.log(LevelError, msg) @@ -130,6 +135,8 @@ func (l *Logger) shouldLog(level LogLevel) bool { return true case LevelError: return level == LevelError + case LevelVuln: + return level == LevelVuln case LevelBase: return level == LevelBase case LevelInfo: @@ -139,15 +146,15 @@ func (l *Logger) shouldLog(level LogLevel) bool { case LevelDebug: return level == LevelDebug case LevelInfoSuccess: - return level == LevelInfo || level == LevelSuccess + return level == LevelInfo || level == LevelSuccess || level == LevelVuln case LevelBaseInfoSuccess: - return level == LevelBase || level == LevelInfo || level == LevelSuccess + return level == LevelBase || level == LevelInfo || level == LevelSuccess || level == LevelVuln default: // 向后兼容：字符串"debug"显示所有 if string(l.config.Level) == "debug" { return true } - return level == LevelInfo || level == LevelSuccess + return level == LevelInfo || level == LevelSuccess || level == LevelVuln } } @@ -201,6 +208,8 @@ func (l *Logger) formatElapsedTime(elapsed time.Duration) string { // getLevelPrefix 获取日志级别前缀 func (l *Logger) getLevelPrefix(level LogLevel) string { switch level { + case LevelVuln: + return PrefixVuln case LevelSuccess: return PrefixSuccess case LevelInfo: diff --git a/plugins/services/activemq.go b/plugins/services/activemq.go index a460647..a1bff9f 100644 --- a/plugins/services/activemq.go +++ b/plugins/services/activemq.go @@ -54,7 +54,7 @@ func (p *ActiveMQPlugin) Scan(ctx context.Context, info *common.HostInfo, config result := TestCredentialsConcurrently(ctx, credentials, authFn, "activemq", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("activemq_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("activemq_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/cassandra.go b/plugins/services/cassandra.go index 5bc4a86..39f1ae2 100644 --- a/plugins/services/cassandra.go +++ b/plugins/services/cassandra.go @@ -52,7 +52,7 @@ func (p *CassandraPlugin) Scan(ctx context.Context, info *common.HostInfo, confi result := TestCredentialsConcurrently(ctx, credentials, authFn, "cassandra", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("cassandra_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("cassandra_credential", target, result.Username, result.Password)) } return result @@ -161,7 +161,7 @@ func (p *CassandraPlugin) tryNoAuthConnection(ctx context.Context, info *common. } session.Close() - common.LogSuccess(i18n.Tr("cassandra_unauth", target)) + common.LogVuln(i18n.Tr("cassandra_unauth", target)) return &ScanResult{ Type: plugins.ResultTypeService, Success: true, diff --git a/plugins/services/elasticsearch.go b/plugins/services/elasticsearch.go index 6c28b25..8706763 100644 --- a/plugins/services/elasticsearch.go +++ b/plugins/services/elasticsearch.go @@ -34,7 +34,7 @@ func (p *ElasticsearchPlugin) Scan(ctx context.Context, info *common.HostInfo, c // 首先检测未授权访问 if p.testCredential(ctx, info, Credential{Username: "", Password: ""}, config, state) { - common.LogSuccess(i18n.Tr("elasticsearch_unauth", target)) + common.LogVuln(i18n.Tr("elasticsearch_unauth", target)) return &ScanResult{ Success: true, Type: plugins.ResultTypeVuln, @@ -55,7 +55,7 @@ func (p *ElasticsearchPlugin) Scan(ctx context.Context, info *common.HostInfo, c for _, cred := range credentials { if p.testCredential(ctx, info, cred, config, state) { - common.LogSuccess(i18n.Tr("elasticsearch_credential", target, cred.Username, cred.Password)) + common.LogVuln(i18n.Tr("elasticsearch_credential", target, cred.Username, cred.Password)) return &ScanResult{ Success: true, Type: plugins.ResultTypeCredential, diff --git a/plugins/services/ftp.go b/plugins/services/ftp.go index 7231184..a9c04a5 100644 --- a/plugins/services/ftp.go +++ b/plugins/services/ftp.go @@ -61,7 +61,7 @@ func (p *FTPPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com output.WriteString(fmt.Sprintf("\n [->] %s", file)) } } - common.LogSuccess(output.String()) + common.LogVuln(output.String()) } return result @@ -202,7 +202,7 @@ func (p *FTPPlugin) testAnonymousAccess(ctx context.Context, info *common.HostIn output.WriteString(fmt.Sprintf("\n [->] %s", file)) } } - common.LogSuccess(output.String()) + common.LogVuln(output.String()) return &ScanResult{ Type: plugins.ResultTypeCredential, diff --git a/plugins/services/kafka.go b/plugins/services/kafka.go index 058445f..64fe65e 100644 --- a/plugins/services/kafka.go +++ b/plugins/services/kafka.go @@ -47,7 +47,7 @@ func (p *KafkaPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c result := TestCredentialsConcurrently(ctx, credentials, authFn, "kafka", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("kafka_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("kafka_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/ldap.go b/plugins/services/ldap.go index ae074ae..0ea8ba5 100644 --- a/plugins/services/ldap.go +++ b/plugins/services/ldap.go @@ -46,7 +46,7 @@ func (p *LDAPPlugin) Scan(ctx context.Context, info *common.HostInfo, config *co result := TestCredentialsConcurrently(ctx, credentials, authFn, "ldap", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("ldap_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("ldap_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/memcached.go b/plugins/services/memcached.go index 5d7cdd4..1e1b9a6 100644 --- a/plugins/services/memcached.go +++ b/plugins/services/memcached.go @@ -33,7 +33,7 @@ func (p *MemcachedPlugin) Scan(ctx context.Context, info *common.HostInfo, confi // 检测未授权访问 if result := p.testUnauthorizedAccess(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("memcached_unauth", target)) + common.LogVuln(i18n.Tr("memcached_unauth", target)) return result } diff --git a/plugins/services/mongodb.go b/plugins/services/mongodb.go index 2d892d6..5a3875f 100644 --- a/plugins/services/mongodb.go +++ b/plugins/services/mongodb.go @@ -46,7 +46,7 @@ func (p *MongoDBPlugin) Scan(ctx context.Context, info *common.HostInfo, config } if isUnauth { - common.LogSuccess(i18n.Tr("mongodb_unauth", target)) + common.LogVuln(i18n.Tr("mongodb_unauth", target)) return &ScanResult{ Type: plugins.ResultTypeVuln, Success: true, @@ -72,7 +72,7 @@ func (p *MongoDBPlugin) Scan(ctx context.Context, info *common.HostInfo, config result := TestCredentialsConcurrently(ctx, credentials, authFn, "mongodb", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("mongodb_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("mongodb_credential", target, result.Username, result.Password)) } return result @@ -195,7 +195,7 @@ func (p *MongoDBPlugin) identifyService(ctx context.Context, info *common.HostIn } if isUnauth { - common.LogSuccess(i18n.Tr("mongodb_unauth", target)) + common.LogVuln(i18n.Tr("mongodb_unauth", target)) return &ScanResult{ Type: plugins.ResultTypeVuln, Success: true, diff --git a/plugins/services/ms17010.go b/plugins/services/ms17010.go index c05434c..9fce9ef 100644 --- a/plugins/services/ms17010.go +++ b/plugins/services/ms17010.go @@ -70,7 +70,7 @@ func (p *MS17010Plugin) Scan(ctx context.Context, info *common.HostInfo, config if osVersion != "" { msg += fmt.Sprintf(" [%s]", osVersion) } - common.LogSuccess(msg) + common.LogVuln(msg) return &ScanResult{ Success: true, diff --git a/plugins/services/mssql.go b/plugins/services/mssql.go index 50db687..a1d6b48 100644 --- a/plugins/services/mssql.go +++ b/plugins/services/mssql.go @@ -48,7 +48,7 @@ func (p *MSSQLPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c result := TestCredentialsConcurrently(ctx, credentials, authFn, "mssql", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("mssql_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("mssql_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/mysql.go b/plugins/services/mysql.go index 454f9b7..4db1463 100644 --- a/plugins/services/mysql.go +++ b/plugins/services/mysql.go @@ -59,7 +59,7 @@ func (p *MySQLPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c result := TestCredentialsConcurrently(ctx, credentials, authFn, "mysql", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("mysql_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("mysql_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/neo4j.go b/plugins/services/neo4j.go index 560b395..5160b49 100644 --- a/plugins/services/neo4j.go +++ b/plugins/services/neo4j.go @@ -34,7 +34,7 @@ func (p *Neo4jPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c // 先测试未授权访问 if result := p.testUnauthorizedAccess(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("neo4j_unauth", target)) + common.LogVuln(i18n.Tr("neo4j_unauth", target)) return result } @@ -54,7 +54,7 @@ func (p *Neo4jPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c result := TestCredentialsConcurrently(ctx, credentials, authFn, "neo4j", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("neo4j_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("neo4j_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/oracle.go b/plugins/services/oracle.go index 09f48d2..87c2703 100644 --- a/plugins/services/oracle.go +++ b/plugins/services/oracle.go @@ -53,7 +53,7 @@ func (p *OraclePlugin) Scan(ctx context.Context, info *common.HostInfo, config * result := TestCredentialsConcurrently(ctx, credentials, authFn, "oracle", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("oracle_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("oracle_credential", target, result.Username, result.Password)) } return result @@ -172,7 +172,7 @@ func (p *OraclePlugin) testUnauthorizedAccess(ctx context.Context, info *common. if result.Conn != nil { _ = result.Conn.Close() } - common.LogSuccess(i18n.Tr("oracle_default_account", target, cred.Username, cred.Password)) + common.LogVuln(i18n.Tr("oracle_default_account", target, cred.Username, cred.Password)) return &ScanResult{ Type: plugins.ResultTypeVuln, Success: true, diff --git a/plugins/services/postgresql.go b/plugins/services/postgresql.go index 40dab26..1777a0d 100644 --- a/plugins/services/postgresql.go +++ b/plugins/services/postgresql.go @@ -34,7 +34,7 @@ func (p *PostgreSQLPlugin) Scan(ctx context.Context, info *common.HostInfo, conf // 先测试未授权访问 if result := p.testUnauthorizedAccess(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("postgresql_vuln", target, result.VulInfo)) + common.LogVuln(i18n.Tr("postgresql_vuln", target, result.VulInfo)) return result } @@ -54,7 +54,7 @@ func (p *PostgreSQLPlugin) Scan(ctx context.Context, info *common.HostInfo, conf result := TestCredentialsConcurrently(ctx, credentials, authFn, "postgresql", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("postgresql_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("postgresql_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/rabbitmq.go b/plugins/services/rabbitmq.go index 0d851f9..d19a4b4 100644 --- a/plugins/services/rabbitmq.go +++ b/plugins/services/rabbitmq.go @@ -55,7 +55,7 @@ func (p *RabbitMQPlugin) Scan(ctx context.Context, info *common.HostInfo, config result := TestCredentialsConcurrently(ctx, credentials, authFn, "rabbitmq", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("rabbitmq_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("rabbitmq_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/rdp.go b/plugins/services/rdp.go index d4fd196..e144760 100644 --- a/plugins/services/rdp.go +++ b/plugins/services/rdp.go @@ -124,7 +124,7 @@ func (p *RDPPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com } result := fmt.Sprintf("RDP %s %s\\%s %s", target, displayDomain, cred.Username, cred.Password) - common.LogSuccess(result) + common.LogVuln(result) return &ScanResult{ Success: true, diff --git a/plugins/services/redis.go b/plugins/services/redis.go index 4ccfd25..35565dd 100644 --- a/plugins/services/redis.go +++ b/plugins/services/redis.go @@ -41,7 +41,7 @@ func (p *RedisPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c // 首先检查未授权访问 if result := p.testUnauthorizedAccess(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("redis_unauth_success", target)) //nolint:govet + common.LogVuln(i18n.Tr("redis_unauth_success", target)) //nolint:govet // 如果需要利用，重新建立连接执行 if p.shouldExploit(config) { @@ -62,7 +62,7 @@ func (p *RedisPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c // 如果成功，记录并执行利用 if result.Success { - common.LogSuccess(i18n.Tr("redis_scan_success", target, result.Password)) //nolint:govet + common.LogVuln(i18n.Tr("redis_scan_success", target, result.Password)) //nolint:govet // 如果需要利用，重新建立连接执行 if p.shouldExploit(config) { @@ -352,7 +352,7 @@ func (p *RedisPlugin) exploit(ctx context.Context, info *common.HostInfo, conn n if success, _, writeErr := p.writeCustomFile(conn, dirPath, fileName, config.Redis.WriteContent); writeErr != nil { common.LogError(i18n.Tr("redis_write_failed", writeErr)) } else if success { - common.LogSuccess(i18n.Tr("redis_write_success", config.Redis.WritePath)) + common.LogVuln(i18n.Tr("redis_write_success", config.Redis.WritePath)) } } @@ -368,7 +368,7 @@ func (p *RedisPlugin) exploit(ctx context.Context, info *common.HostInfo, conn n if success, _, writeErr := p.writeCustomFile(conn, dirPath, fileName, string(fileContent)); writeErr != nil { common.LogError(i18n.Tr("redis_write_failed", writeErr)) } else if success { - common.LogSuccess(i18n.Tr("redis_file_write_success", config.Redis.WriteFile, config.Redis.WritePath)) + common.LogVuln(i18n.Tr("redis_file_write_success", config.Redis.WriteFile, config.Redis.WritePath)) } } } @@ -378,7 +378,7 @@ func (p *RedisPlugin) exploit(ctx context.Context, info *common.HostInfo, conn n if success, _, keyErr := p.writeKey(conn, config.Redis.File); keyErr != nil { common.LogError(i18n.Tr("redis_ssh_key_failed", keyErr)) } else if success { - common.LogSuccess(i18n.GetText("redis_ssh_key_success")) + common.LogVuln(i18n.GetText("redis_ssh_key_success")) } } @@ -387,7 +387,7 @@ func (p *RedisPlugin) exploit(ctx context.Context, info *common.HostInfo, conn n if success, _, cronErr := p.writeCron(conn, config.Redis.Shell); cronErr != nil { common.LogError(i18n.Tr("redis_cron_failed", cronErr)) } else if success { - common.LogSuccess(i18n.GetText("redis_cron_success")) + common.LogVuln(i18n.GetText("redis_cron_success")) } } diff --git a/plugins/services/rsync.go b/plugins/services/rsync.go index 872db66..e7f84e2 100644 --- a/plugins/services/rsync.go +++ b/plugins/services/rsync.go @@ -74,7 +74,7 @@ func (p *RsyncPlugin) Scan(ctx context.Context, info *common.HostInfo, config *c result := TestCredentialsConcurrently(ctx, creds, authFn, "rsync", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("rsync_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("rsync_credential", target, result.Username, result.Password)) return result } diff --git a/plugins/services/smb.go b/plugins/services/smb.go index 7ec1533..fa0c4e2 100644 --- a/plugins/services/smb.go +++ b/plugins/services/smb.go @@ -55,7 +55,7 @@ func (p *SmbPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com if smbTarget.Protocol == SMBProtocol2 && info.Port == 445 { if checkSMBGhost(info.Host, config.Timeout) { smbTarget.Vulnerable = &SMBVuln{CVE20200796: true} - common.LogSuccess(i18n.Tr("smbghost_vuln", target)) + common.LogVuln(i18n.Tr("smbghost_vuln", target)) } } @@ -75,7 +75,7 @@ func (p *SmbPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com } else { successMsg = fmt.Sprintf("SMB %s 未授权访问 - %s:%s", target, result.Username, result.Password) } - common.LogSuccess(successMsg) + common.LogVuln(successMsg) return result } @@ -102,7 +102,7 @@ func (p *SmbPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com } else { successMsg = fmt.Sprintf("SMB %s %s:%s", target, result.Username, result.Password) } - common.LogSuccess(successMsg) + common.LogVuln(successMsg) } return result diff --git a/plugins/services/smtp.go b/plugins/services/smtp.go index d061120..e3dbd2c 100644 --- a/plugins/services/smtp.go +++ b/plugins/services/smtp.go @@ -61,7 +61,7 @@ func (p *SMTPPlugin) Scan(ctx context.Context, info *common.HostInfo, config *co result := TestCredentialsConcurrently(ctx, creds, authFn, "smtp", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("smtp_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("smtp_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/ssh.go b/plugins/services/ssh.go index 3265873..d6a54c9 100644 --- a/plugins/services/ssh.go +++ b/plugins/services/ssh.go @@ -40,7 +40,7 @@ func (p *SSHPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com // 如果指定了SSH密钥，优先使用密钥认证 if config.Credentials.SSHKeyPath != "" { if result := p.scanWithKey(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("ssh_key_auth_success", target, result.Username)) //nolint:govet + common.LogVuln(i18n.Tr("ssh_key_auth_success", target, result.Username)) //nolint:govet return result } } @@ -70,7 +70,7 @@ func (p *SSHPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com // 记录成功 if result.Success { - common.LogSuccess(i18n.Tr("ssh_pwd_auth_success", target, result.Username, result.Password)) //nolint:govet + common.LogVuln(i18n.Tr("ssh_pwd_auth_success", target, result.Username, result.Password)) //nolint:govet } return result diff --git a/plugins/services/telnet.go b/plugins/services/telnet.go index 357a157..e95d69e 100644 --- a/plugins/services/telnet.go +++ b/plugins/services/telnet.go @@ -71,7 +71,7 @@ func (p *TelnetPlugin) Scan(ctx context.Context, info *common.HostInfo, config * result := TestCredentialsConcurrently(ctx, creds, authFn, "telnet", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("telnet_credential", target, result.Username, result.Password)) + common.LogVuln(i18n.Tr("telnet_credential", target, result.Username, result.Password)) } return result diff --git a/plugins/services/vnc.go b/plugins/services/vnc.go index ee1c121..69f279d 100644 --- a/plugins/services/vnc.go +++ b/plugins/services/vnc.go @@ -29,7 +29,7 @@ func (p *VNCPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com // 检查未授权访问 if result := p.testUnauthAccess(ctx, info, config, state); result != nil && result.Success { - common.LogSuccess(i18n.Tr("vnc_unauth", target)) + common.LogVuln(i18n.Tr("vnc_unauth", target)) return result } @@ -53,7 +53,7 @@ func (p *VNCPlugin) Scan(ctx context.Context, info *common.HostInfo, config *com result := TestCredentialsConcurrently(ctx, credentials, authFn, "vnc", testConfig) if result.Success { - common.LogSuccess(i18n.Tr("vnc_credential", target, result.Password)) + common.LogVuln(i18n.Tr("vnc_credential", target, result.Password)) } return result diff --git a/webscan/lib/poc_executor.go b/webscan/lib/poc_executor.go index 42b8aa7..5aab360 100644 --- a/webscan/lib/poc_executor.go +++ b/webscan/lib/poc_executor.go @@ -133,7 +133,7 @@ func CheckMultiPoc(req *http.Request, pocs []*Poc, workers int, pocCtx *POCConte } // 输出成功日志 - common.LogSuccess(logMsg) + common.LogVuln(logMsg) } } }() @@ -655,7 +655,7 @@ func recordVulnerabilityResult(targetURL string, pocDef *Poc, params StrMap, ski } // 输出成功日志 - common.LogSuccess(logMsg) + common.LogVuln(logMsg) } // isFuzz 检查规则是否包含需要Fuzz测试的参数