feat: v2.1.0 核心重构与功能增强

## 架构重构 - 全局变量消除，迁移至 Config/State 对象 - SMB 插件融合（smb/smb2/smbghost/smbinfo） - 服务探测重构，实现 Nmap 风格 fallback 机制 - 输出系统重构，TXT 实时刷盘 + 双写机制 - i18n 框架升级至 go-i18n ## 性能优化 - 正则表达式预编译 - 内存优化 map[string]struct{} - 并发指纹匹配 - SOCKS5 连接复用 - 滑动窗口调度 + 自适应线程池 ## 新功能 - Web 管理界面 - 多格式 POC 适配（xray/afrog） - 增强指纹库（3139条） - Favicon hash 指纹识别 - 插件选择性编译（Build Tags） - fscan-lab 靶场环境 - 默认端口扩展（62→133） ## 构建系统 - 添加 no_local tag 支持排除本地插件 - 多版本构建：fscan/fscan-nolocal/fscan-web - CI 添加 snapshot 模式支持仅测试构建 ## Bug 修复 - 修复 120+ 个问题，包括 RDP panic、批量扫描漏报、 JSON 输出格式、Redis 检测、Context 超时等 ## 测试增强 - 单元测试覆盖率 74-100% - 并发安全测试 - 集成测试（Web/端口/服务/SSH/ICMP）
2026-09-24 04:01:52 +08:00 · 2026-01-11 20:16:23 +08:00
parent 6b13b2e84f
commit 71b92d4408
948 changed files with 92335 additions and 24630 deletions
@@ -0,0 +1,207 @@
+//go:build plugin_ldap || !plugin_selective
+
+package services
+
+import (
+	"context"
+	"fmt"
+
+	ldaplib "github.com/go-ldap/ldap/v3"
+	"github.com/shadow1ng/fscan/common"
+	"github.com/shadow1ng/fscan/common/i18n"
+	"github.com/shadow1ng/fscan/plugins"
+)
+
+// LDAPPlugin LDAP扫描插件
+type LDAPPlugin struct {
+	plugins.BasePlugin
+}
+
+func NewLDAPPlugin() *LDAPPlugin {
+	return &LDAPPlugin{
+		BasePlugin: plugins.NewBasePlugin("ldap"),
+	}
+}
+
+func (p *LDAPPlugin) Scan(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	if config.DisableBrute {
+		return p.identifyService(ctx, info, config, state)
+	}
+
+	target := info.Target()
+
+	credentials := GenerateCredentials("ldap", config)
+	if len(credentials) == 0 {
+		return &ScanResult{
+			Success: false,
+			Service: "ldap",
+			Error:   fmt.Errorf("没有可用的测试凭据"),
+		}
+	}
+
+	// 使用公共框架进行并发凭据测试
+	authFn := p.createAuthFunc(info, config, state)
+	testConfig := DefaultConcurrentTestConfig(config)
+
+	result := TestCredentialsConcurrently(ctx, credentials, authFn, "ldap", testConfig)
+
+	if result.Success {
+		common.LogSuccess(i18n.Tr("ldap_credential", target, result.Username, result.Password))
+	}
+
+	return result
+}
+
+// createAuthFunc 创建LDAP认证函数
+func (p *LDAPPlugin) createAuthFunc(info *common.HostInfo, config *common.Config, state *common.State) AuthFunc {
+	return func(ctx context.Context, cred Credential) *AuthResult {
+		return p.doLDAPAuth(ctx, info, cred, config, state)
+	}
+}
+
+// doLDAPAuth 执行LDAP认证
+func (p *LDAPPlugin) doLDAPAuth(ctx context.Context, info *common.HostInfo, cred Credential, config *common.Config, state *common.State) *AuthResult {
+	conn, err := p.connectLDAP(ctx, info, config)
+	if err != nil {
+		state.IncrementTCPFailedPacketCount()
+		return &AuthResult{
+			Success:   false,
+			ErrorType: classifyLDAPErrorType(err),
+			Error:     err,
+		}
+	}
+	state.IncrementTCPSuccessPacketCount()
+
+	// 尝试多种DN格式进行绑定测试
+	dnFormats := []string{
+		fmt.Sprintf("cn=%s,dc=example,dc=com", cred.Username),
+		fmt.Sprintf("uid=%s,dc=example,dc=com", cred.Username),
+		fmt.Sprintf("cn=%s,ou=users,dc=example,dc=com", cred.Username),
+		cred.Username,
+	}
+
+	for _, dn := range dnFormats {
+		if bindErr := conn.Bind(dn, cred.Password); bindErr == nil {
+			return &AuthResult{
+				Success:   true,
+				Conn:      &ldapConnWrapper{conn},
+				ErrorType: ErrorTypeUnknown,
+				Error:     nil,
+			}
+		}
+	}
+
+	_ = conn.Close()
+	return &AuthResult{
+		Success:   false,
+		ErrorType: ErrorTypeAuth,
+		Error:     fmt.Errorf("所有DN格式都失败"),
+	}
+}
+
+// ldapConnWrapper 包装 ldap.Conn 以实现 io.Closer
+type ldapConnWrapper struct {
+	*ldaplib.Conn
+}
+
+func (w *ldapConnWrapper) Close() error {
+	return w.Conn.Close()
+}
+
+// connectLDAP 连接LDAP服务器
+func (p *LDAPPlugin) connectLDAP(ctx context.Context, info *common.HostInfo, config *common.Config) (*ldaplib.Conn, error) {
+	target := info.Target()
+
+	type result struct {
+		conn *ldaplib.Conn
+		err  error
+	}
+	resultChan := make(chan result, 1)
+
+	go func() {
+		tcpConn, err := common.WrapperTcpWithTimeout("tcp", target, config.Timeout)
+		if err != nil {
+			resultChan <- result{nil, err}
+			return
+		}
+
+		var conn *ldaplib.Conn
+		if info.Port == 636 {
+			conn = ldaplib.NewConn(tcpConn, true)
+		} else {
+			conn = ldaplib.NewConn(tcpConn, false)
+		}
+		conn.Start()
+
+		resultChan <- result{conn, nil}
+	}()
+
+	select {
+	case res := <-resultChan:
+		return res.conn, res.err
+	case <-ctx.Done():
+		// context 被取消，启动清理协程等待并关闭可能创建的连接
+		go func() {
+			res := <-resultChan
+			if res.conn != nil {
+				_ = res.conn.Close()
+			}
+		}()
+		return nil, ctx.Err()
+	}
+}
+
+// classifyLDAPErrorType LDAP错误分类
+func classifyLDAPErrorType(err error) ErrorType {
+	if err == nil {
+		return ErrorTypeUnknown
+	}
+
+	ldapAuthErrors := []string{
+		"invalid credentials",
+		"authentication failed",
+		"bind failed",
+		"ldap result code",
+		"invalid dn",
+		"access denied",
+	}
+
+	ldapNetworkErrors := append(CommonNetworkErrors,
+		"ldap: connection lost",
+		"ldap: connection error",
+	)
+
+	return ClassifyError(err, ldapAuthErrors, ldapNetworkErrors)
+}
+
+func (p *LDAPPlugin) identifyService(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	target := info.Target()
+
+	conn, err := p.connectLDAP(ctx, info, config)
+	if err != nil {
+		state.IncrementTCPFailedPacketCount()
+		return &ScanResult{
+			Success: false,
+			Service: "ldap",
+			Error:   err,
+		}
+	}
+	state.IncrementTCPSuccessPacketCount()
+	defer func() { _ = conn.Close() }()
+
+	banner := "LDAP"
+	common.LogSuccess(i18n.Tr("ldap_service", target, banner))
+
+	return &ScanResult{
+		Type:    plugins.ResultTypeService,
+		Success: true,
+		Service: "ldap",
+		Banner:  banner,
+	}
+}
+
+func init() {
+	RegisterPluginWithPorts("ldap", func() Plugin {
+		return NewLDAPPlugin()
+	}, []int{389, 636, 3268, 3269})
+}