mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-24 12:11:52 +08:00
feat: v2.1.0 核心重构与功能增强
## 架构重构
- 全局变量消除，迁移至 Config/State 对象
- SMB 插件融合（smb/smb2/smbghost/smbinfo）
- 服务探测重构，实现 Nmap 风格 fallback 机制
- 输出系统重构，TXT 实时刷盘 + 双写机制
- i18n 框架升级至 go-i18n
## 性能优化
- 正则表达式预编译
- 内存优化 map[string]struct{}
- 并发指纹匹配
- SOCKS5 连接复用
- 滑动窗口调度 + 自适应线程池
## 新功能
- Web 管理界面
- 多格式 POC 适配（xray/afrog）
- 增强指纹库（3139条）
- Favicon hash 指纹识别
- 插件选择性编译（Build Tags）
- fscan-lab 靶场环境
- 默认端口扩展（62→133）
## 构建系统
- 添加 no_local tag 支持排除本地插件
- 多版本构建：fscan/fscan-nolocal/fscan-web
- CI 添加 snapshot 模式支持仅测试构建
## Bug 修复
- 修复 120+ 个问题，包括 RDP panic、批量扫描漏报、
JSON 输出格式、Redis 检测、Context 超时等
## 测试增强
- 单元测试覆盖率 74-100%
- 并发安全测试
- 集成测试（Web/端口/服务/SSH/ICMP）
This commit is contained in:
ZacharyZcR
@@ -0,0 +1,23 @@
|
||||
FROM golang:1.20-alpine AS builder
|
||||
|
||||
WORKDIR /build
|
||||
|
||||
COPY go.mod go.sum* ./
|
||||
RUN go mod download || true
|
||||
|
||||
COPY . .
|
||||
RUN CGO_ENABLED=0 GOOS=linux go build -o api .
|
||||
|
||||
FROM alpine:latest
|
||||
|
||||
RUN apk add --no-cache ca-certificates
|
||||
|
||||
WORKDIR /app
|
||||
|
||||
COPY --from=builder /build/api /app/api
|
||||
|
||||
RUN mkdir -p /app/data /app/flags
|
||||
|
||||
EXPOSE 8888
|
||||
|
||||
CMD ["/app/api"]
|
||||
@@ -0,0 +1,37 @@
|
||||
module fscan-lab-api
|
||||
|
||||
go 1.20
|
||||
|
||||
require (
|
||||
github.com/gin-contrib/cors v1.7.0
|
||||
github.com/gin-gonic/gin v1.9.1
|
||||
)
|
||||
|
||||
require (
|
||||
github.com/bytedance/sonic v1.11.2 // indirect
|
||||
github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d // indirect
|
||||
github.com/chenzhuoyu/iasm v0.9.1 // indirect
|
||||
github.com/gabriel-vasile/mimetype v1.4.3 // indirect
|
||||
github.com/gin-contrib/sse v0.1.0 // indirect
|
||||
github.com/go-playground/locales v0.14.1 // indirect
|
||||
github.com/go-playground/universal-translator v0.18.1 // indirect
|
||||
github.com/go-playground/validator/v10 v10.19.0 // indirect
|
||||
github.com/goccy/go-json v0.10.2 // indirect
|
||||
github.com/json-iterator/go v1.1.12 // indirect
|
||||
github.com/klauspost/cpuid/v2 v2.2.7 // indirect
|
||||
github.com/kr/text v0.2.0 // indirect
|
||||
github.com/leodido/go-urn v1.4.0 // indirect
|
||||
github.com/mattn/go-isatty v0.0.20 // indirect
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd // indirect
|
||||
github.com/modern-go/reflect2 v1.0.2 // indirect
|
||||
github.com/pelletier/go-toml/v2 v2.1.1 // indirect
|
||||
github.com/twitchyliquid64/golang-asm v0.15.1 // indirect
|
||||
github.com/ugorji/go/codec v1.2.12 // indirect
|
||||
golang.org/x/arch v0.7.0 // indirect
|
||||
golang.org/x/crypto v0.21.0 // indirect
|
||||
golang.org/x/net v0.22.0 // indirect
|
||||
golang.org/x/sys v0.18.0 // indirect
|
||||
golang.org/x/text v0.14.0 // indirect
|
||||
google.golang.org/protobuf v1.33.0 // indirect
|
||||
gopkg.in/yaml.v3 v3.0.1 // indirect
|
||||
)
|
||||
@@ -0,0 +1,94 @@
|
||||
github.com/bytedance/sonic v1.5.0/go.mod h1:ED5hyg4y6t3/9Ku1R6dU/4KyJ48DZ4jPhfY1O2AihPM=
|
||||
github.com/bytedance/sonic v1.10.0-rc/go.mod h1:ElCzW+ufi8qKqNW0FY314xriJhyJhuoJ3gFZdAHF7NM=
|
||||
github.com/bytedance/sonic v1.11.2 h1:ywfwo0a/3j9HR8wsYGWsIWl2mvRsI950HyoxiBERw5A=
|
||||
github.com/bytedance/sonic v1.11.2/go.mod h1:iZcSUejdk5aukTND/Eu/ivjQuEL0Cu9/rf50Hi0u/g4=
|
||||
github.com/chenzhuoyu/base64x v0.0.0-20211019084208-fb5309c8db06/go.mod h1:DH46F32mSOjUmXrMHnKwZdA8wcEefY7UVqBKYGjpdQY=
|
||||
github.com/chenzhuoyu/base64x v0.0.0-20221115062448-fe3a3abad311/go.mod h1:b583jCggY9gE99b6G5LEC39OIiVsWj+R97kbl5odCEk=
|
||||
github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d h1:77cEq6EriyTZ0g/qfRdp61a3Uu/AWrgIq2s0ClJV1g0=
|
||||
github.com/chenzhuoyu/base64x v0.0.0-20230717121745-296ad89f973d/go.mod h1:8EPpVsBuRksnlj1mLy4AWzRNQYxauNi62uWcE3to6eA=
|
||||
github.com/chenzhuoyu/iasm v0.9.0/go.mod h1:Xjy2NpN3h7aUqeqM+woSuuvxmIe6+DDsiNLIrkAmYog=
|
||||
github.com/chenzhuoyu/iasm v0.9.1 h1:tUHQJXo3NhBqw6s33wkGn9SP3bvrWLdlVIJ3hQBL7P0=
|
||||
github.com/chenzhuoyu/iasm v0.9.1/go.mod h1:Xjy2NpN3h7aUqeqM+woSuuvxmIe6+DDsiNLIrkAmYog=
|
||||
github.com/creack/pty v1.1.9/go.mod h1:oKZEueFk5CKHvIhNR5MUki03XCEU+Q6VDXinZuGJ33E=
|
||||
github.com/davecgh/go-spew v1.1.0/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
||||
github.com/davecgh/go-spew v1.1.1 h1:vj9j/u1bqnvCEfJOwUhtlOARqs3+rkHYY13jYWTU97c=
|
||||
github.com/davecgh/go-spew v1.1.1/go.mod h1:J7Y8YcW2NihsgmVo/mv3lAwl/skON4iLHjSsI+c5H38=
|
||||
github.com/gabriel-vasile/mimetype v1.4.3 h1:in2uUcidCuFcDKtdcBxlR0rJ1+fsokWf+uqxgUFjbI0=
|
||||
github.com/gabriel-vasile/mimetype v1.4.3/go.mod h1:d8uq/6HKRL6CGdk+aubisF/M5GcPfT7nKyLpA0lbSSk=
|
||||
github.com/gin-contrib/cors v1.7.0 h1:wZX2wuZ0o7rV2/1i7gb4Jn+gW7HBqaP91fizJkBUJOA=
|
||||
github.com/gin-contrib/cors v1.7.0/go.mod h1:cI+h6iOAyxKRtUtC6iF/Si1KSFvGm/gK+kshxlCi8ro=
|
||||
github.com/gin-contrib/sse v0.1.0 h1:Y/yl/+YNO8GZSjAhjMsSuLt29uWRFHdHYUb5lYOV9qE=
|
||||
github.com/gin-contrib/sse v0.1.0/go.mod h1:RHrZQHXnP2xjPF+u1gW/2HnVO7nvIa9PG3Gm+fLHvGI=
|
||||
github.com/gin-gonic/gin v1.9.1 h1:4idEAncQnU5cB7BeOkPtxjfCSye0AAm1R0RVIqJ+Jmg=
|
||||
github.com/gin-gonic/gin v1.9.1/go.mod h1:hPrL7YrpYKXt5YId3A/Tnip5kqbEAP+KLuI3SUcPTeU=
|
||||
github.com/go-playground/assert/v2 v2.2.0 h1:JvknZsQTYeFEAhQwI4qEt9cyV5ONwRHC+lYKSsYSR8s=
|
||||
github.com/go-playground/locales v0.14.1 h1:EWaQ/wswjilfKLTECiXz7Rh+3BjFhfDFKv/oXslEjJA=
|
||||
github.com/go-playground/locales v0.14.1/go.mod h1:hxrqLVvrK65+Rwrd5Fc6F2O76J/NuW9t0sjnWqG1slY=
|
||||
github.com/go-playground/universal-translator v0.18.1 h1:Bcnm0ZwsGyWbCzImXv+pAJnYK9S473LQFuzCbDbfSFY=
|
||||
github.com/go-playground/universal-translator v0.18.1/go.mod h1:xekY+UJKNuX9WP91TpwSH2VMlDf28Uj24BCp08ZFTUY=
|
||||
github.com/go-playground/validator/v10 v10.19.0 h1:ol+5Fu+cSq9JD7SoSqe04GMI92cbn0+wvQ3bZ8b/AU4=
|
||||
github.com/go-playground/validator/v10 v10.19.0/go.mod h1:dbuPbCMFw/DrkbEynArYaCwl3amGuJotoKCe95atGMM=
|
||||
github.com/goccy/go-json v0.10.2 h1:CrxCmQqYDkv1z7lO7Wbh2HN93uovUHgrECaO5ZrCXAU=
|
||||
github.com/goccy/go-json v0.10.2/go.mod h1:6MelG93GURQebXPDq3khkgXZkazVtN9CRI+MGFi0w8I=
|
||||
github.com/google/go-cmp v0.5.5 h1:Khx7svrCpmxxtHBq5j2mp/xVjsi8hQMfNLvJFAlrGgU=
|
||||
github.com/google/gofuzz v1.0.0/go.mod h1:dBl0BpW6vV/+mYPU4Po3pmUjxk6FQPldtuIdl/M65Eg=
|
||||
github.com/json-iterator/go v1.1.12 h1:PV8peI4a0ysnczrg+LtxykD8LfKY9ML6u2jnxaEnrnM=
|
||||
github.com/json-iterator/go v1.1.12/go.mod h1:e30LSqwooZae/UwlEbR2852Gd8hjQvJoHmT4TnhNGBo=
|
||||
github.com/klauspost/cpuid/v2 v2.0.9/go.mod h1:FInQzS24/EEf25PyTYn52gqo7WaD8xa0213Md/qVLRg=
|
||||
github.com/klauspost/cpuid/v2 v2.2.7 h1:ZWSB3igEs+d0qvnxR/ZBzXVmxkgt8DdzP6m9pfuVLDM=
|
||||
github.com/klauspost/cpuid/v2 v2.2.7/go.mod h1:Lcz8mBdAVJIBVzewtcLocK12l3Y+JytZYpaMropDUws=
|
||||
github.com/knz/go-libedit v1.10.1/go.mod h1:MZTVkCWyz0oBc7JOWP3wNAzd002ZbM/5hgShxwh4x8M=
|
||||
github.com/kr/pretty v0.3.0 h1:WgNl7dwNpEZ6jJ9k1snq4pZsg7DOEN8hP9Xw0Tsjwk0=
|
||||
github.com/kr/text v0.2.0 h1:5Nx0Ya0ZqY2ygV366QzturHI13Jq95ApcVaJBhpS+AY=
|
||||
github.com/kr/text v0.2.0/go.mod h1:eLer722TekiGuMkidMxC/pM04lWEeraHUUmBw8l2grE=
|
||||
github.com/leodido/go-urn v1.4.0 h1:WT9HwE9SGECu3lg4d/dIA+jxlljEa1/ffXKmRjqdmIQ=
|
||||
github.com/leodido/go-urn v1.4.0/go.mod h1:bvxc+MVxLKB4z00jd1z+Dvzr47oO32F/QSNjSBOlFxI=
|
||||
github.com/mattn/go-isatty v0.0.20 h1:xfD0iDuEKnDkl03q4limB+vH+GxLEtL/jb4xVJSWWEY=
|
||||
github.com/mattn/go-isatty v0.0.20/go.mod h1:W+V8PltTTMOvKvAeJH7IuucS94S2C6jfK/D7dTCTo3Y=
|
||||
github.com/modern-go/concurrent v0.0.0-20180228061459-e0a39a4cb421/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd h1:TRLaZ9cD/w8PVh93nsPXa1VrQ6jlwL5oN8l14QlcNfg=
|
||||
github.com/modern-go/concurrent v0.0.0-20180306012644-bacd9c7ef1dd/go.mod h1:6dJC0mAP4ikYIbvyc7fijjWJddQyLn8Ig3JB5CqoB9Q=
|
||||
github.com/modern-go/reflect2 v1.0.2 h1:xBagoLtFs94CBntxluKeaWgTMpvLxC4ur3nMaC9Gz0M=
|
||||
github.com/modern-go/reflect2 v1.0.2/go.mod h1:yWuevngMOJpCy52FWWMvUC8ws7m/LJsjYzDa0/r8luk=
|
||||
github.com/pelletier/go-toml/v2 v2.1.1 h1:LWAJwfNvjQZCFIDKWYQaM62NcYeYViCmWIwmOStowAI=
|
||||
github.com/pelletier/go-toml/v2 v2.1.1/go.mod h1:tJU2Z3ZkXwnxa4DPO899bsyIoywizdUvyaeZurnPPDc=
|
||||
github.com/pmezard/go-difflib v1.0.0 h1:4DBwDE0NGyQoBHbLQYPwSUPoCMWR5BEzIk/f1lZbAQM=
|
||||
github.com/pmezard/go-difflib v1.0.0/go.mod h1:iKH77koFhYxTK1pcRnkKkqfTogsbg7gZNVY4sRDYZ/4=
|
||||
github.com/rogpeppe/go-internal v1.8.0 h1:FCbCCtXNOY3UtUuHUYaghJg4y7Fd14rXifAYUAtL9R8=
|
||||
github.com/stretchr/objx v0.1.0/go.mod h1:HFkY916IF+rwdDfMAkV7OtwuqBVzrE8GR6GFx+wExME=
|
||||
github.com/stretchr/objx v0.4.0/go.mod h1:YvHI0jy2hoMjB+UWwv71VJQ9isScKT/TqJzVSSt89Yw=
|
||||
github.com/stretchr/objx v0.5.0/go.mod h1:Yh+to48EsGEfYuaHDzXPcE3xhTkx73EhmCGUpEOglKo=
|
||||
github.com/stretchr/testify v1.3.0/go.mod h1:M5WIy9Dh21IEIfnGCwXGc5bZfKNJtfHm1UVUgZn+9EI=
|
||||
github.com/stretchr/testify v1.7.0/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
|
||||
github.com/stretchr/testify v1.7.1/go.mod h1:6Fq8oRcR53rry900zMqJjRRixrwX3KX962/h/Wwjteg=
|
||||
github.com/stretchr/testify v1.8.0/go.mod h1:yNjHg4UonilssWZ8iaSj1OCr/vHnekPRkoO+kdMU+MU=
|
||||
github.com/stretchr/testify v1.8.1/go.mod h1:w2LPCIKwWwSfY2zedu0+kehJoqGctiVI29o6fzry7u4=
|
||||
github.com/stretchr/testify v1.8.4 h1:CcVxjf3Q8PM0mHUKJCdn+eZZtm5yQwehR5yeSVQQcUk=
|
||||
github.com/stretchr/testify v1.8.4/go.mod h1:sz/lmYIOXD/1dqDmKjjqLyZ2RngseejIcXlSw2iwfAo=
|
||||
github.com/twitchyliquid64/golang-asm v0.15.1 h1:SU5vSMR7hnwNxj24w34ZyCi/FmDZTkS4MhqMhdFk5YI=
|
||||
github.com/twitchyliquid64/golang-asm v0.15.1/go.mod h1:a1lVb/DtPvCB8fslRZhAngC2+aY1QWCk3Cedj/Gdt08=
|
||||
github.com/ugorji/go/codec v1.2.12 h1:9LC83zGrHhuUA9l16C9AHXAqEV/2wBQ4nkvumAE65EE=
|
||||
github.com/ugorji/go/codec v1.2.12/go.mod h1:UNopzCgEMSXjBc6AOMqYvWC1ktqTAfzJZUZgYf6w6lg=
|
||||
golang.org/x/arch v0.0.0-20210923205945-b76863e36670/go.mod h1:5om86z9Hs0C8fWVUuoMHwpExlXzs5Tkyp9hOrfG7pp8=
|
||||
golang.org/x/arch v0.7.0 h1:pskyeJh/3AmoQ8CPE95vxHLqp1G1GfGNXTmcl9NEKTc=
|
||||
golang.org/x/arch v0.7.0/go.mod h1:FEVrYAQjsQXMVJ1nsMoVVXPZg6p2JE2mx8psSWTDQys=
|
||||
golang.org/x/crypto v0.21.0 h1:X31++rzVUdKhX5sWmSOFZxx8UW/ldWx55cbf08iNAMA=
|
||||
golang.org/x/crypto v0.21.0/go.mod h1:0BP7YvVV9gBbVKyeTG0Gyn+gZm94bibOW5BjDEYAOMs=
|
||||
golang.org/x/net v0.22.0 h1:9sGLhx7iRIHEiX0oAJ3MRZMUCElJgy7Br1nO+AMN3Tc=
|
||||
golang.org/x/net v0.22.0/go.mod h1:JKghWKKOSdJwpW2GEx0Ja7fmaKnMsbu+MWVZTokSYmg=
|
||||
golang.org/x/sys v0.5.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||
golang.org/x/sys v0.6.0/go.mod h1:oPkhp1MJrh7nUepCBck5+mAzfO9JrbApNNgaTdGDITg=
|
||||
golang.org/x/sys v0.18.0 h1:DBdB3niSjOA/O0blCZBqDefyWNYveAYMNF1Wum0DYQ4=
|
||||
golang.org/x/sys v0.18.0/go.mod h1:/VUhepiaJMQUp4+oa/7Zr1D23ma6VTLIYjOOTFZPUcA=
|
||||
golang.org/x/text v0.14.0 h1:ScX5w1eTa3QqT8oi6+ziP7dTV1S2+ALU0bI+0zXKWiQ=
|
||||
golang.org/x/text v0.14.0/go.mod h1:18ZOQIKpY8NJVqYksKHtTdi31H5itFRjB5/qKTNYzSU=
|
||||
golang.org/x/xerrors v0.0.0-20191204190536-9bdfabe68543 h1:E7g+9GITq07hpfrRu66IVDexMakfv52eLZ2CXBWiKr4=
|
||||
google.golang.org/protobuf v1.33.0 h1:uNO2rsAINq/JlFpSdYEKIZ0uKD/R9cpdv0T+yoGwGmI=
|
||||
google.golang.org/protobuf v1.33.0/go.mod h1:c6P6GXX6sHbq/GpV6MGZEdwhWPcYBgnhAHhKbcUYpos=
|
||||
gopkg.in/check.v1 v0.0.0-20161208181325-20d25e280405/go.mod h1:Co6ibVJAznAaIkqp8huTwlJQCZ016jof/cbN4VW5Yz0=
|
||||
gopkg.in/check.v1 v1.0.0-20201130134442-10cb98267c6c h1:Hei/4ADfdWqJk1ZMxUNpqntNwaWcugrBjAiHlqqRiVk=
|
||||
gopkg.in/yaml.v3 v3.0.0-20200313102051-9f266ea9e77c/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||
gopkg.in/yaml.v3 v3.0.1 h1:fxVm/GzAzEWqLHuvctI91KS9hhNmmWOoWu0XTYJS7CA=
|
||||
gopkg.in/yaml.v3 v3.0.1/go.mod h1:K4uyk7z7BCEPqu6E+C64Yfv1cQ7kz7rIZviUmN+EgEM=
|
||||
nullprogram.com/x/optparse v1.0.0/go.mod h1:KdyPE+Igbe0jQUrVfMqDMeJQIJZEuyV7pjYmp6pbG50=
|
||||
rsc.io/pdf v0.1.1/go.mod h1:n8OzWcQ6Sp37PL01nO98y4iUCRdTGarVfzxY20ICaU4=
|
||||
@@ -0,0 +1,551 @@
|
||||
package main
|
||||
|
||||
import (
|
||||
"encoding/json"
|
||||
"fmt"
|
||||
"log"
|
||||
"net/http"
|
||||
"os"
|
||||
"strings"
|
||||
"time"
|
||||
|
||||
"github.com/gin-contrib/cors"
|
||||
"github.com/gin-gonic/gin"
|
||||
)
|
||||
|
||||
type Challenge struct {
|
||||
ID int `json:"id"`
|
||||
Name string `json:"name"`
|
||||
Description string `json:"description"`
|
||||
Difficulty string `json:"difficulty"`
|
||||
Points int `json:"points"`
|
||||
Flag string `json:"flag"`
|
||||
Hints []string `json:"hints"`
|
||||
Network string `json:"network"`
|
||||
Targets []string `json:"targets"`
|
||||
Order int `json:"order"` // 渗透顺序
|
||||
}
|
||||
|
||||
type Progress struct {
|
||||
UserID string `json:"user_id"`
|
||||
CompletedChallenges []int `json:"completed_challenges"`
|
||||
TotalScore int `json:"total_score"`
|
||||
StartTime time.Time `json:"start_time"`
|
||||
LastUpdate time.Time `json:"last_update"`
|
||||
SubmissionHistory []Submission `json:"submission_history"`
|
||||
}
|
||||
|
||||
type Submission struct {
|
||||
ChallengeID int `json:"challenge_id"`
|
||||
Flag string `json:"flag"`
|
||||
Correct bool `json:"correct"`
|
||||
Timestamp time.Time `json:"timestamp"`
|
||||
}
|
||||
|
||||
type NetworkNode struct {
|
||||
ID string `json:"id"`
|
||||
Name string `json:"name"`
|
||||
IP string `json:"ip"`
|
||||
Services []string `json:"services"`
|
||||
Network string `json:"network"`
|
||||
Status string `json:"status"` // unknown, discovered, compromised
|
||||
}
|
||||
|
||||
type NetworkTopology struct {
|
||||
Nodes []NetworkNode `json:"nodes"`
|
||||
Edges []NetworkEdge `json:"edges"`
|
||||
}
|
||||
|
||||
type NetworkEdge struct {
|
||||
From string `json:"from"`
|
||||
To string `json:"to"`
|
||||
Access string `json:"access"` // allowed, blocked, vpn
|
||||
}
|
||||
|
||||
var challenges = []Challenge{
|
||||
{
|
||||
ID: 1,
|
||||
Name: "DMZ 侦察",
|
||||
Description: "扫描 DMZ 区，发现 Web 服务器并获取第一个 flag",
|
||||
Difficulty: "Easy",
|
||||
Points: 100,
|
||||
Flag: "FSCAN_LAB{w3b_f1ng3rpr1nt_d1sc0v3ry}",
|
||||
Hints: []string{"扫描 10.10.1.0/24 网段", "寻找 Tomcat 服务", "flag 在 webapps/ROOT/flag1.txt"},
|
||||
Network: "dmz",
|
||||
Targets: []string{"10.10.1.10"},
|
||||
Order: 1, // 第一步：外网扫描 DMZ
|
||||
},
|
||||
{
|
||||
ID: 2,
|
||||
Name: "FTP 弱密码",
|
||||
Description: "通过 FTP 弱密码进入 DMZ 区并获取 SSH 密钥",
|
||||
Difficulty: "Easy",
|
||||
Points: 150,
|
||||
Flag: "FSCAN_LAB{ftp_w34k_p4ssw0rd_pwn}",
|
||||
Hints: []string{"FTP 服务在 10.10.1.12", "尝试 admin/123456", "查看 .ssh 目录"},
|
||||
Network: "dmz",
|
||||
Targets: []string{"10.10.1.12"},
|
||||
Order: 2, // 第二步：FTP 获取 SSH 密钥
|
||||
},
|
||||
{
|
||||
ID: 3,
|
||||
Name: "VPN 网关突破",
|
||||
Description: "使用获取的 SSH 密钥连接 VPN 网关进入办公网。提供两种渗透方法：(1) 直接上传 fscan 到 VPN 网关扫描办公网；(2) 使用 SSH 动态端口转发建立 SOCKS5 代理，在 Attacker 机器上通过代理扫描。详见 /root/docs/penetration-guide.md",
|
||||
Difficulty: "Medium",
|
||||
Points: 200,
|
||||
Flag: "FSCAN_LAB{vpn_g4t3w4y_br34ch3d}",
|
||||
Hints: []string{
|
||||
"使用 office_key 连接 10.10.1.13",
|
||||
"VPN 网关有两个网卡：10.10.1.13(DMZ) 和 10.10.2.2(办公网)",
|
||||
"flag 在 /etc/flag3.txt",
|
||||
"方法1: scp fscan 到网关，然后 ssh 登录扫描",
|
||||
"方法2: ssh -D 1080 建立SOCKS5隧道，fscan -socks5 127.0.0.1:1080 -np",
|
||||
},
|
||||
Network: "dmz",
|
||||
Targets: []string{"10.10.1.13"},
|
||||
Order: 3, // 第三步：进入办公网
|
||||
},
|
||||
{
|
||||
ID: 4,
|
||||
Name: "办公网备份服务器",
|
||||
Description: "发现 Rsync 备份服务器并获取敏感文件",
|
||||
Difficulty: "Medium",
|
||||
Points: 250,
|
||||
Flag: "FSCAN_LAB{rsync_b4ckup_l34k}",
|
||||
Hints: []string{"扫描办公网 873 端口", "Rsync 可能未授权访问", "备份目录: rsync://10.10.2.22/backup"},
|
||||
Network: "office",
|
||||
Targets: []string{"10.10.2.22"},
|
||||
Order: 7, // 办公网探索，获取 Redis 密码
|
||||
},
|
||||
{
|
||||
ID: 5,
|
||||
Name: "生产网 Redis 渗透",
|
||||
Description: "利用 Redis 弱密码获取 flag 并准备横向移动",
|
||||
Difficulty: "Hard",
|
||||
Points: 300,
|
||||
Flag: "FSCAN_LAB{r3d1s_un4uth0r1z3d_4cc3ss}",
|
||||
Hints: []string{"从备份文件获取 Redis 密码", "连接 10.10.3.31", "GET flag5"},
|
||||
Network: "production",
|
||||
Targets: []string{"10.10.3.31"},
|
||||
Order: 8, // 进入生产网
|
||||
},
|
||||
{
|
||||
ID: 6,
|
||||
Name: "核心网 MySQL 数据库",
|
||||
Description: "爆破 MySQL 数据库获取敏感信息",
|
||||
Difficulty: "Hard",
|
||||
Points: 350,
|
||||
Flag: "FSCAN_LAB{mysql_d4t4b4s3_pwn3d}",
|
||||
Hints: []string{"从生产网扫描核心网 3306 端口", "尝试 root/Password", "SELECT flag FROM secrets.flags"},
|
||||
Network: "core",
|
||||
Targets: []string{"10.10.4.40"},
|
||||
Order: 10, // 核心网数据库，获取 Mongo 凭证
|
||||
},
|
||||
{
|
||||
ID: 7,
|
||||
Name: "最终目标 - MongoDB",
|
||||
Description: "攻陷 MongoDB 获取最终 flag，完成整个网络渗透",
|
||||
Difficulty: "Expert",
|
||||
Points: 500,
|
||||
Flag: "FSCAN_LAB{y0u_pwn3d_th3_n3tw0rk}",
|
||||
Hints: []string{"从 MySQL 获取 MongoDB 凭证", "连接 10.10.4.43", "查询 admin_secrets 集合"},
|
||||
Network: "core",
|
||||
Targets: []string{"10.10.4.43"},
|
||||
Order: 13, // 最终目标
|
||||
},
|
||||
{
|
||||
ID: 8,
|
||||
Name: "Elasticsearch 情报收集",
|
||||
Description: "利用 Elasticsearch 未授权访问获取生产网敏感信息",
|
||||
Difficulty: "Medium",
|
||||
Points: 200,
|
||||
Flag: "FSCAN_LAB{3l4st1cs34rch_un4uth0r1z3d}",
|
||||
Hints: []string{"扫描生产网 9200 端口", "Elasticsearch 默认无认证", "GET /_cat/indices 查看索引"},
|
||||
Network: "production",
|
||||
Targets: []string{"10.10.3.34"},
|
||||
Order: 9, // 生产网情报收集
|
||||
},
|
||||
{
|
||||
ID: 9,
|
||||
Name: "PostgreSQL 数据库渗透",
|
||||
Description: "爆破 PostgreSQL 数据库获取业务数据",
|
||||
Difficulty: "Hard",
|
||||
Points: 300,
|
||||
Flag: "FSCAN_LAB{p0stgr3s_d4t4b4s3_pwn3d}",
|
||||
Hints: []string{"扫描核心网 5432 端口", "尝试 postgres/postgres123", "SELECT * FROM business.secrets"},
|
||||
Network: "core",
|
||||
Targets: []string{"10.10.4.42"},
|
||||
Order: 11, // 核心网数据库探索
|
||||
},
|
||||
{
|
||||
ID: 10,
|
||||
Name: "MSSQL 数据库攻击",
|
||||
Description: "攻破 MSSQL 数据库获取企业核心数据",
|
||||
Difficulty: "Hard",
|
||||
Points: 300,
|
||||
Flag: "FSCAN_LAB{mssql_s4_4cc0unt_pwn3d}",
|
||||
Hints: []string{"扫描核心网 1433 端口", "尝试 sa/P@ssword123", "SELECT * FROM master.dbo.secrets"},
|
||||
Network: "core",
|
||||
Targets: []string{"10.10.4.41"},
|
||||
Order: 12, // 核心网数据库探索
|
||||
},
|
||||
{
|
||||
ID: 11,
|
||||
Name: "VNC 远程桌面入侵",
|
||||
Description: "通过 VNC 弱密码获取办公网主机控制权",
|
||||
Difficulty: "Medium",
|
||||
Points: 200,
|
||||
Flag: "FSCAN_LAB{vnc_r3m0t3_d3skt0p_pwn3d}",
|
||||
Hints: []string{"扫描办公网 5901 端口", "VNC 密码: password", "flag 在桌面 flag11.txt"},
|
||||
Network: "office",
|
||||
Targets: []string{"10.10.2.20"},
|
||||
Order: 5, // 办公网探索
|
||||
},
|
||||
{
|
||||
ID: 12,
|
||||
Name: "老旧 Telnet 服务",
|
||||
Description: "利用古老的 Telnet 服务获取办公网老旧主机访问权",
|
||||
Difficulty: "Easy",
|
||||
Points: 150,
|
||||
Flag: "FSCAN_LAB{t3ln3t_l3g4cy_syst3m}",
|
||||
Hints: []string{"扫描办公网 23 端口", "尝试 admin/admin", "cat /root/flag12.txt"},
|
||||
Network: "office",
|
||||
Targets: []string{"10.10.2.24"},
|
||||
Order: 4, // 办公网探索
|
||||
},
|
||||
{
|
||||
ID: 13,
|
||||
Name: "打印机 SMB 共享",
|
||||
Description: "发现办公网打印机的 SMB 共享服务，通过弱密码访问共享文件",
|
||||
Difficulty: "Medium",
|
||||
Points: 200,
|
||||
Flag: "FSCAN_LAB{smb_pr1nt3r_sh4r3_pwn3d}",
|
||||
Hints: []string{"扫描办公网 445 端口 (SMB)", "用户名: printer, 尝试弱密码爆破", "共享名: print$ 或 backup"},
|
||||
Network: "office",
|
||||
Targets: []string{"10.10.2.23"},
|
||||
Order: 6, // 办公网探索
|
||||
},
|
||||
}
|
||||
|
||||
// networkTopology contains the network structure for visualization
|
||||
var networkTopology = NetworkTopology{
|
||||
Nodes: []NetworkNode{
|
||||
{ID: "internet", Name: "Internet", IP: "172.16.0.0/24", Services: []string{}, Network: "internet", Status: "discovered"},
|
||||
{ID: "attacker", Name: "Attacker", IP: "172.16.0.2", Services: []string{"fscan"}, Network: "internet", Status: "compromised"},
|
||||
{ID: "web-dmz", Name: "Web DMZ", IP: "10.10.1.10", Services: []string{"Tomcat:8080"}, Network: "dmz", Status: "unknown"},
|
||||
{ID: "mail-dmz", Name: "Mail DMZ", IP: "10.10.1.11", Services: []string{"SMTP:25"}, Network: "dmz", Status: "unknown"},
|
||||
{ID: "ftp-dmz", Name: "FTP DMZ", IP: "10.10.1.12", Services: []string{"FTP:21"}, Network: "dmz", Status: "unknown"},
|
||||
{ID: "vpn-gateway", Name: "VPN Gateway", IP: "10.10.1.13/10.10.2.2", Services: []string{"SSH:22"}, Network: "dmz", Status: "unknown"},
|
||||
{ID: "pc-vnc", Name: "PC VNC", IP: "10.10.2.20", Services: []string{"VNC:5901"}, Network: "office", Status: "unknown"},
|
||||
{ID: "pc-ssh", Name: "PC SSH", IP: "10.10.2.21", Services: []string{"SSH:22"}, Network: "office", Status: "unknown"},
|
||||
{ID: "backup-server", Name: "Backup Server", IP: "10.10.2.22", Services: []string{"Rsync:873"}, Network: "office", Status: "unknown"},
|
||||
{ID: "printer", Name: "Printer", IP: "10.10.2.23", Services: []string{"SMB:445"}, Network: "office", Status: "unknown"},
|
||||
{ID: "oldpc-telnet", Name: "Old PC", IP: "10.10.2.24", Services: []string{"Telnet:23"}, Network: "office", Status: "unknown"},
|
||||
{ID: "app-web", Name: "App Web", IP: "10.10.3.30", Services: []string{"Tomcat:8080"}, Network: "production", Status: "unknown"},
|
||||
{ID: "cache-redis", Name: "Cache Redis", IP: "10.10.3.31", Services: []string{"Redis:6379"}, Network: "production", Status: "unknown"},
|
||||
{ID: "mq-rabbit", Name: "RabbitMQ", IP: "10.10.3.32", Services: []string{"RabbitMQ:5672,15672"}, Network: "production", Status: "unknown"},
|
||||
{ID: "mq-activemq", Name: "ActiveMQ", IP: "10.10.3.33", Services: []string{"ActiveMQ:61613,61614"}, Network: "production", Status: "unknown"},
|
||||
{ID: "search-es", Name: "Elasticsearch", IP: "10.10.3.34", Services: []string{"ES:9200"}, Network: "production", Status: "unknown"},
|
||||
{ID: "db-mysql", Name: "MySQL DB", IP: "10.10.4.40", Services: []string{"MySQL:3306"}, Network: "core", Status: "unknown"},
|
||||
{ID: "db-mssql", Name: "MSSQL DB", IP: "10.10.4.41", Services: []string{"MSSQL:1433"}, Network: "core", Status: "unknown"},
|
||||
{ID: "db-postgres", Name: "PostgreSQL DB", IP: "10.10.4.42", Services: []string{"PostgreSQL:5432"}, Network: "core", Status: "unknown"},
|
||||
{ID: "db-mongo", Name: "MongoDB", IP: "10.10.4.43", Services: []string{"MongoDB:27017"}, Network: "core", Status: "unknown"},
|
||||
{ID: "dc-ldap", Name: "Domain Controller", IP: "10.10.4.44", Services: []string{"LDAP:389,636"}, Network: "core", Status: "unknown"},
|
||||
},
|
||||
Edges: []NetworkEdge{
|
||||
{From: "attacker", To: "web-dmz", Access: "allowed"},
|
||||
{From: "attacker", To: "mail-dmz", Access: "allowed"},
|
||||
{From: "attacker", To: "ftp-dmz", Access: "allowed"},
|
||||
{From: "attacker", To: "vpn-gateway", Access: "allowed"},
|
||||
{From: "vpn-gateway", To: "pc-vnc", Access: "vpn"},
|
||||
{From: "vpn-gateway", To: "pc-ssh", Access: "vpn"},
|
||||
{From: "vpn-gateway", To: "backup-server", Access: "vpn"},
|
||||
{From: "vpn-gateway", To: "printer", Access: "vpn"},
|
||||
{From: "vpn-gateway", To: "oldpc-telnet", Access: "vpn"},
|
||||
{From: "backup-server", To: "cache-redis", Access: "allowed"},
|
||||
{From: "cache-redis", To: "db-mysql", Access: "allowed"},
|
||||
{From: "cache-redis", To: "db-mssql", Access: "allowed"},
|
||||
{From: "cache-redis", To: "db-postgres", Access: "allowed"},
|
||||
{From: "cache-redis", To: "db-mongo", Access: "allowed"},
|
||||
{From: "cache-redis", To: "dc-ldap", Access: "allowed"},
|
||||
},
|
||||
}
|
||||
|
||||
// challengeToNodes maps challenge IDs to compromised node IDs
|
||||
var challengeToNodes = map[int][]string{
|
||||
1: {"web-dmz"}, // Flag 1: DMZ Web 服务器
|
||||
2: {"ftp-dmz"}, // Flag 2: FTP 弱密码
|
||||
3: {"vpn-gateway"}, // Flag 3: VPN 网关
|
||||
4: {"backup-server"}, // Flag 4: 备份服务器
|
||||
5: {"cache-redis"}, // Flag 5: Redis
|
||||
6: {"db-mysql"}, // Flag 6: MySQL
|
||||
7: {"db-mongo"}, // Flag 7: MongoDB (最终目标)
|
||||
8: {"search-es"}, // Flag 8: Elasticsearch
|
||||
9: {"db-postgres"}, // Flag 9: PostgreSQL
|
||||
10: {"db-mssql"}, // Flag 10: MSSQL
|
||||
11: {"pc-vnc"}, // Flag 11: VNC
|
||||
12: {"oldpc-telnet"}, // Flag 12: Telnet
|
||||
13: {"printer"}, // Flag 13: SNMP
|
||||
}
|
||||
|
||||
// challengeMap provides O(1) lookup by challenge ID
|
||||
var challengeMap map[int]*Challenge
|
||||
|
||||
func init() {
|
||||
challengeMap = make(map[int]*Challenge, len(challenges))
|
||||
for i := range challenges {
|
||||
challengeMap[challenges[i].ID] = &challenges[i]
|
||||
}
|
||||
}
|
||||
|
||||
// getChallengeByID returns a challenge by ID or error if not found
|
||||
func getChallengeByID(id int) (*Challenge, error) {
|
||||
ch, ok := challengeMap[id]
|
||||
if !ok {
|
||||
return nil, fmt.Errorf("challenge not found")
|
||||
}
|
||||
return ch, nil
|
||||
}
|
||||
|
||||
// contains checks if a slice contains a value
|
||||
func contains(slice []int, val int) bool {
|
||||
for _, v := range slice {
|
||||
if v == val {
|
||||
return true
|
||||
}
|
||||
}
|
||||
return false
|
||||
}
|
||||
|
||||
const progressFile = "/app/data/progress.json"
|
||||
|
||||
func loadProgress() (*Progress, error) {
|
||||
data, err := os.ReadFile(progressFile)
|
||||
if err != nil {
|
||||
if os.IsNotExist(err) {
|
||||
return &Progress{
|
||||
UserID: "default",
|
||||
CompletedChallenges: []int{},
|
||||
TotalScore: 0,
|
||||
StartTime: time.Now(),
|
||||
LastUpdate: time.Now(),
|
||||
SubmissionHistory: []Submission{},
|
||||
}, nil
|
||||
}
|
||||
return nil, err
|
||||
}
|
||||
|
||||
var progress Progress
|
||||
if err := json.Unmarshal(data, &progress); err != nil {
|
||||
return nil, err
|
||||
}
|
||||
return &progress, nil
|
||||
}
|
||||
|
||||
func saveProgress(progress *Progress) error {
|
||||
progress.LastUpdate = time.Now()
|
||||
data, err := json.MarshalIndent(progress, "", " ")
|
||||
if err != nil {
|
||||
return err
|
||||
}
|
||||
return os.WriteFile(progressFile, data, 0644)
|
||||
}
|
||||
|
||||
func main() {
|
||||
os.MkdirAll("/app/data", 0755)
|
||||
|
||||
r := gin.Default()
|
||||
|
||||
r.Use(cors.New(cors.Config{
|
||||
AllowOrigins: []string{"*"},
|
||||
AllowMethods: []string{"GET", "POST", "PUT", "DELETE"},
|
||||
AllowHeaders: []string{"Origin", "Content-Type"},
|
||||
ExposeHeaders: []string{"Content-Length"},
|
||||
AllowCredentials: true,
|
||||
}))
|
||||
|
||||
r.GET("/api/challenges", getChallenges)
|
||||
r.GET("/api/challenges/:id", getChallenge)
|
||||
r.POST("/api/submit", submitFlag)
|
||||
r.GET("/api/progress", getProgress)
|
||||
r.POST("/api/reset", resetProgress)
|
||||
r.GET("/api/topology", getTopology)
|
||||
r.GET("/api/hints/:id", getHints)
|
||||
|
||||
log.Println("Starting fscan-lab API server on :8888")
|
||||
r.Run(":8888")
|
||||
}
|
||||
|
||||
func getChallenges(c *gin.Context) {
|
||||
publicChallenges := make([]map[string]interface{}, len(challenges))
|
||||
for i, ch := range challenges {
|
||||
publicChallenges[i] = map[string]interface{}{
|
||||
"id": ch.ID,
|
||||
"name": ch.Name,
|
||||
"description": ch.Description,
|
||||
"difficulty": ch.Difficulty,
|
||||
"points": ch.Points,
|
||||
"network": ch.Network,
|
||||
"targets": ch.Targets,
|
||||
"order": ch.Order, // 渗透顺序
|
||||
}
|
||||
}
|
||||
c.JSON(http.StatusOK, publicChallenges)
|
||||
}
|
||||
|
||||
func getChallenge(c *gin.Context) {
|
||||
idStr := c.Param("id")
|
||||
var id int
|
||||
if _, err := fmt.Sscanf(idStr, "%d", &id); err != nil {
|
||||
c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid challenge ID"})
|
||||
return
|
||||
}
|
||||
|
||||
challenge, err := getChallengeByID(id)
|
||||
if err != nil {
|
||||
c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, gin.H{
|
||||
"id": challenge.ID,
|
||||
"name": challenge.Name,
|
||||
"description": challenge.Description,
|
||||
"difficulty": challenge.Difficulty,
|
||||
"points": challenge.Points,
|
||||
"network": challenge.Network,
|
||||
"targets": challenge.Targets,
|
||||
})
|
||||
}
|
||||
|
||||
func submitFlag(c *gin.Context) {
|
||||
var req struct {
|
||||
ChallengeID int `json:"challenge_id"`
|
||||
Flag string `json:"flag"`
|
||||
}
|
||||
|
||||
if err := c.ShouldBindJSON(&req); err != nil {
|
||||
c.JSON(http.StatusBadRequest, gin.H{"error": err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
challenge, err := getChallengeByID(req.ChallengeID)
|
||||
if err != nil {
|
||||
c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
progress, err := loadProgress()
|
||||
if err != nil {
|
||||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to load progress"})
|
||||
return
|
||||
}
|
||||
|
||||
correct := strings.TrimSpace(req.Flag) == strings.TrimSpace(challenge.Flag)
|
||||
alreadySolved := contains(progress.CompletedChallenges, req.ChallengeID)
|
||||
|
||||
// Record submission
|
||||
progress.SubmissionHistory = append(progress.SubmissionHistory, Submission{
|
||||
ChallengeID: req.ChallengeID,
|
||||
Flag: req.Flag,
|
||||
Correct: correct,
|
||||
Timestamp: time.Now(),
|
||||
})
|
||||
|
||||
// Award points for first-time completion
|
||||
if correct && !alreadySolved {
|
||||
progress.CompletedChallenges = append(progress.CompletedChallenges, req.ChallengeID)
|
||||
progress.TotalScore += challenge.Points
|
||||
}
|
||||
|
||||
if err := saveProgress(progress); err != nil {
|
||||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to save progress"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, gin.H{
|
||||
"correct": correct,
|
||||
"message": map[bool]string{true: "Congratulations! Flag accepted!", false: "Incorrect flag. Try again!"}[correct],
|
||||
"points_earned": challenge.Points,
|
||||
"total_score": progress.TotalScore,
|
||||
"already_solved": alreadySolved,
|
||||
})
|
||||
}
|
||||
|
||||
func getProgress(c *gin.Context) {
|
||||
progress, err := loadProgress()
|
||||
if err != nil {
|
||||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to load progress"})
|
||||
return
|
||||
}
|
||||
c.JSON(http.StatusOK, progress)
|
||||
}
|
||||
|
||||
func resetProgress(c *gin.Context) {
|
||||
progress := &Progress{
|
||||
UserID: "default",
|
||||
CompletedChallenges: []int{},
|
||||
TotalScore: 0,
|
||||
StartTime: time.Now(),
|
||||
LastUpdate: time.Now(),
|
||||
SubmissionHistory: []Submission{},
|
||||
}
|
||||
|
||||
if err := saveProgress(progress); err != nil {
|
||||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to reset progress"})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, gin.H{"message": "Progress reset successfully"})
|
||||
}
|
||||
|
||||
func getTopology(c *gin.Context) {
|
||||
progress, err := loadProgress()
|
||||
if err != nil {
|
||||
c.JSON(http.StatusInternalServerError, gin.H{"error": "Failed to load progress"})
|
||||
return
|
||||
}
|
||||
|
||||
// Build set of compromised nodes based on completed challenges
|
||||
compromisedNodes := make(map[string]bool)
|
||||
for _, challengeID := range progress.CompletedChallenges {
|
||||
if nodeIDs, ok := challengeToNodes[challengeID]; ok {
|
||||
for _, nodeID := range nodeIDs {
|
||||
compromisedNodes[nodeID] = true
|
||||
}
|
||||
}
|
||||
}
|
||||
|
||||
// Clone topology and update node statuses
|
||||
topology := NetworkTopology{
|
||||
Nodes: make([]NetworkNode, len(networkTopology.Nodes)),
|
||||
Edges: networkTopology.Edges,
|
||||
}
|
||||
|
||||
for i, node := range networkTopology.Nodes {
|
||||
topology.Nodes[i] = node
|
||||
// Update status based on progress
|
||||
if compromisedNodes[node.ID] {
|
||||
topology.Nodes[i].Status = "compromised"
|
||||
}
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, topology)
|
||||
}
|
||||
|
||||
func getHints(c *gin.Context) {
|
||||
idStr := c.Param("id")
|
||||
var id int
|
||||
if _, err := fmt.Sscanf(idStr, "%d", &id); err != nil {
|
||||
c.JSON(http.StatusBadRequest, gin.H{"error": "Invalid challenge ID"})
|
||||
return
|
||||
}
|
||||
|
||||
challenge, err := getChallengeByID(id)
|
||||
if err != nil {
|
||||
c.JSON(http.StatusNotFound, gin.H{"error": err.Error()})
|
||||
return
|
||||
}
|
||||
|
||||
c.JSON(http.StatusOK, gin.H{"hints": challenge.Hints})
|
||||
}
|
||||
Reference in New Issue
Block a user