feat: v2.1.0 核心重构与功能增强

## 架构重构 - 全局变量消除，迁移至 Config/State 对象 - SMB 插件融合（smb/smb2/smbghost/smbinfo） - 服务探测重构，实现 Nmap 风格 fallback 机制 - 输出系统重构，TXT 实时刷盘 + 双写机制 - i18n 框架升级至 go-i18n ## 性能优化 - 正则表达式预编译 - 内存优化 map[string]struct{} - 并发指纹匹配 - SOCKS5 连接复用 - 滑动窗口调度 + 自适应线程池 ## 新功能 - Web 管理界面 - 多格式 POC 适配（xray/afrog） - 增强指纹库（3139条） - Favicon hash 指纹识别 - 插件选择性编译（Build Tags） - fscan-lab 靶场环境 - 默认端口扩展（62→133） ## 构建系统 - 添加 no_local tag 支持排除本地插件 - 多版本构建：fscan/fscan-nolocal/fscan-web - CI 添加 snapshot 模式支持仅测试构建 ## Bug 修复 - 修复 120+ 个问题，包括 RDP panic、批量扫描漏报、 JSON 输出格式、Redis 检测、Context 超时等 ## 测试增强 - 单元测试覆盖率 74-100% - 并发安全测试 - 集成测试（Web/端口/服务/SSH/ICMP）
2026-09-24 04:01:52 +08:00 · 2026-01-11 20:16:23 +08:00
parent 6b13b2e84f
commit 71b92d4408
948 changed files with 92335 additions and 24630 deletions
@@ -0,0 +1,314 @@
+//go:build plugin_rabbitmq || !plugin_selective
+
+package services
+
+import (
+	"context"
+	"fmt"
+	"io"
+	"net/http"
+	"strings"
+	"time"
+
+	"github.com/shadow1ng/fscan/common"
+	"github.com/shadow1ng/fscan/common/i18n"
+	"github.com/shadow1ng/fscan/plugins"
+)
+
+// RabbitMQPlugin RabbitMQ扫描插件
+type RabbitMQPlugin struct {
+	plugins.BasePlugin
+}
+
+func NewRabbitMQPlugin() *RabbitMQPlugin {
+	return &RabbitMQPlugin{
+		BasePlugin: plugins.NewBasePlugin("rabbitmq"),
+	}
+}
+
+func (p *RabbitMQPlugin) Scan(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	target := info.Target()
+
+	if config.DisableBrute {
+		return p.identifyService(ctx, info, config, state)
+	}
+
+	// 先检测未授权访问
+	if result := p.testUnauthorizedAccess(ctx, info, config, state); result != nil && result.Success {
+		common.LogSuccess(i18n.Tr("rabbitmq_service", target, result.Banner))
+		return result
+	}
+
+	credentials := GenerateCredentials("rabbitmq", config)
+	if len(credentials) == 0 {
+		return &ScanResult{
+			Success: false,
+			Service: "rabbitmq",
+			Error:   fmt.Errorf("没有可用的测试凭据"),
+		}
+	}
+
+	// 使用公共框架进行并发凭据测试
+	authFn := p.createAuthFunc(info, config, state)
+	testConfig := DefaultConcurrentTestConfig(config)
+
+	result := TestCredentialsConcurrently(ctx, credentials, authFn, "rabbitmq", testConfig)
+
+	if result.Success {
+		common.LogSuccess(i18n.Tr("rabbitmq_credential", target, result.Username, result.Password))
+	}
+
+	return result
+}
+
+// createAuthFunc 创建RabbitMQ认证函数
+func (p *RabbitMQPlugin) createAuthFunc(info *common.HostInfo, config *common.Config, state *common.State) AuthFunc {
+	return func(ctx context.Context, cred Credential) *AuthResult {
+		return p.doRabbitMQAuth(ctx, info, cred, config, state)
+	}
+}
+
+// doRabbitMQAuth 执行RabbitMQ认证
+func (p *RabbitMQPlugin) doRabbitMQAuth(ctx context.Context, info *common.HostInfo, cred Credential, config *common.Config, state *common.State) *AuthResult {
+	// 对于AMQP端口，使用HTTP管理接口
+	port := info.Port
+	if port == 5672 || port == 5671 {
+		port = 15672
+		if info.Port == 5671 {
+			port = 15671
+		}
+	}
+
+	baseURL := fmt.Sprintf("http://%s:%d", info.Host, port)
+	client := &http.Client{Timeout: config.Timeout}
+
+	req, err := http.NewRequestWithContext(ctx, "GET", baseURL+"/api/overview", nil)
+	if err != nil {
+		return &AuthResult{
+			Success:   false,
+			ErrorType: classifyRabbitMQErrorType(err),
+			Error:     err,
+		}
+	}
+
+	req.SetBasicAuth(cred.Username, cred.Password)
+	req.Header.Set("Content-Type", "application/json")
+
+	resp, err := client.Do(req)
+	if err != nil {
+		state.IncrementTCPFailedPacketCount()
+		return &AuthResult{
+			Success:   false,
+			ErrorType: classifyRabbitMQErrorType(err),
+			Error:     err,
+		}
+	}
+	state.IncrementTCPSuccessPacketCount()
+	defer func() { _ = resp.Body.Close() }()
+
+	if resp.StatusCode == 200 {
+		return &AuthResult{
+			Success:   true,
+			Conn:      &rabbitMQConnWrapper{},
+			ErrorType: ErrorTypeUnknown,
+			Error:     nil,
+		}
+	}
+
+	if resp.StatusCode == 401 || resp.StatusCode == 403 {
+		return &AuthResult{
+			Success:   false,
+			ErrorType: ErrorTypeAuth,
+			Error:     fmt.Errorf("认证失败，状态码: %d", resp.StatusCode),
+		}
+	}
+
+	return &AuthResult{
+		Success:   false,
+		ErrorType: ErrorTypeUnknown,
+		Error:     fmt.Errorf("意外响应状态码: %d", resp.StatusCode),
+	}
+}
+
+// rabbitMQConnWrapper RabbitMQ连接包装器
+type rabbitMQConnWrapper struct{}
+
+func (w *rabbitMQConnWrapper) Close() error {
+	return nil
+}
+
+// classifyRabbitMQErrorType RabbitMQ错误分类
+func classifyRabbitMQErrorType(err error) ErrorType {
+	if err == nil {
+		return ErrorTypeUnknown
+	}
+
+	rabbitMQAuthErrors := []string{
+		"authentication failed",
+		"access denied",
+		"unauthorized",
+		"401 unauthorized",
+		"403 forbidden",
+	}
+
+	return ClassifyError(err, rabbitMQAuthErrors, CommonNetworkErrors)
+}
+
+// testUnauthorizedAccess 测试RabbitMQ未授权访问
+func (p *RabbitMQPlugin) testUnauthorizedAccess(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	port := info.Port
+	if port == 5672 || port == 5671 {
+		port = 15672
+	}
+
+	baseURL := fmt.Sprintf("http://%s:%d", info.Host, port)
+	client := &http.Client{Timeout: config.Timeout}
+
+	// 测试无认证访问
+	req, err := http.NewRequestWithContext(ctx, "GET", baseURL+"/api/overview", nil)
+	if err != nil {
+		return nil
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		state.IncrementTCPFailedPacketCount()
+	} else {
+		state.IncrementTCPSuccessPacketCount()
+		defer func() { _ = resp.Body.Close() }()
+
+		if resp.StatusCode == 200 {
+			return &ScanResult{
+				Type:    plugins.ResultTypeVuln,
+				Success: true,
+				Service: "rabbitmq",
+				Banner:  "未授权访问",
+			}
+		}
+	}
+
+	// 测试guest默认用户
+	guestReq, err := http.NewRequestWithContext(ctx, "GET", baseURL+"/api/overview", nil)
+	if err == nil {
+		guestReq.SetBasicAuth("guest", "guest")
+		guestResp, guestErr := client.Do(guestReq)
+		if guestErr == nil {
+			defer func() { _ = guestResp.Body.Close() }()
+			if guestResp.StatusCode == 200 {
+				return &ScanResult{
+					Type:    plugins.ResultTypeVuln,
+					Success: true,
+					Service: "rabbitmq",
+					Banner:  "未授权访问 - guest默认密码",
+				}
+			}
+		}
+	}
+
+	return nil
+}
+
+// testAMQPProtocol 检测AMQP协议
+func (p *RabbitMQPlugin) testAMQPProtocol(ctx context.Context, info *common.HostInfo, config *common.Config) *ScanResult {
+	target := info.Target()
+
+	conn, err := common.WrapperTcpWithTimeout("tcp", target, config.Timeout)
+	if err != nil {
+		return nil
+	}
+	defer func() { _ = conn.Close() }()
+
+	_ = conn.SetDeadline(time.Now().Add(config.Timeout))
+
+	// 发送AMQP协议头
+	amqpHeader := []byte{0x41, 0x4d, 0x51, 0x50, 0x00, 0x00, 0x09, 0x01}
+	_, err = conn.Write(amqpHeader)
+	if err != nil {
+		return nil
+	}
+
+	buffer := make([]byte, 32)
+	n, err := conn.Read(buffer)
+	if err != nil || n < 4 {
+		return nil
+	}
+
+	if string(buffer[:4]) == "AMQP" || (n >= 8 && buffer[0] == 0x01) {
+		banner := "RabbitMQ AMQP"
+		common.LogSuccess(i18n.Tr("rabbitmq_service", target, banner))
+		return &ScanResult{
+			Type:    plugins.ResultTypeService,
+			Success: true,
+			Service: "rabbitmq",
+			Banner:  banner,
+		}
+	}
+
+	return nil
+}
+
+func (p *RabbitMQPlugin) identifyService(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	// 对于AMQP端口，检测AMQP协议
+	if info.Port == 5672 || info.Port == 5671 {
+		if result := p.testAMQPProtocol(ctx, info, config); result != nil && result.Success {
+			return result
+		}
+	}
+
+	// 检测HTTP管理界面
+	return p.testManagementInterface(ctx, info, config, state)
+}
+
+func (p *RabbitMQPlugin) testManagementInterface(ctx context.Context, info *common.HostInfo, config *common.Config, state *common.State) *ScanResult {
+	target := info.Target()
+	baseURL := fmt.Sprintf("http://%s:%d", info.Host, info.Port)
+
+	client := &http.Client{Timeout: config.Timeout}
+
+	req, err := http.NewRequestWithContext(ctx, "GET", baseURL, nil)
+	if err != nil {
+		return &ScanResult{
+			Success: false,
+			Service: "rabbitmq",
+			Error:   err,
+		}
+	}
+
+	resp, err := client.Do(req)
+	if err != nil {
+		state.IncrementTCPFailedPacketCount()
+		return &ScanResult{
+			Success: false,
+			Service: "rabbitmq",
+			Error:   err,
+		}
+	}
+	state.IncrementTCPSuccessPacketCount()
+	defer func() { _ = resp.Body.Close() }()
+
+	if resp.StatusCode == 200 || resp.StatusCode == 401 {
+		body, _ := io.ReadAll(resp.Body)
+		if strings.Contains(strings.ToLower(string(body)), "rabbitmq") {
+			banner := "RabbitMQ Management"
+			common.LogSuccess(i18n.Tr("rabbitmq_detected", target, banner))
+			return &ScanResult{
+				Type:    plugins.ResultTypeService,
+				Success: true,
+				Service: "rabbitmq",
+				Banner:  banner,
+			}
+		}
+	}
+
+	return &ScanResult{
+		Success: false,
+		Service: "rabbitmq",
+		Error:   fmt.Errorf("无法识别为RabbitMQ服务"),
+	}
+}
+
+func init() {
+	RegisterPluginWithPorts("rabbitmq", func() Plugin {
+		return NewRabbitMQPlugin()
+	}, []int{5672, 15672, 5671})
+}