mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-22 03:10:42 +08:00
v2.1.2 核心优化与多架构发布 (#561)
* feat: v2.1.0 核心重构与功能增强
## 架构重构
- 全局变量消除,迁移至 Config/State 对象
- SMB 插件融合(smb/smb2/smbghost/smbinfo)
- 服务探测重构,实现 Nmap 风格 fallback 机制
- 输出系统重构,TXT 实时刷盘 + 双写机制
- i18n 框架升级至 go-i18n
## 性能优化
- 正则表达式预编译
- 内存优化 map[string]struct{}
- 并发指纹匹配
- SOCKS5 连接复用
- 滑动窗口调度 + 自适应线程池
## 新功能
- Web 管理界面
- 多格式 POC 适配(xray/afrog)
- 增强指纹库(3139条)
- Favicon hash 指纹识别
- 插件选择性编译(Build Tags)
- fscan-lab 靶场环境
- 默认端口扩展(62→133)
## 构建系统
- 添加 no_local tag 支持排除本地插件
- 多版本构建:fscan/fscan-nolocal/fscan-web
- CI 添加 snapshot 模式支持仅测试构建
## Bug 修复
- 修复 120+ 个问题,包括 RDP panic、批量扫描漏报、
JSON 输出格式、Redis 检测、Context 超时等
## 测试增强
- 单元测试覆盖率 74-100%
- 并发安全测试
- 集成测试(Web/端口/服务/SSH/ICMP)
* fix(ci): 移除 PR 对 Project 自动化的触发
* fix: Elasticsearch未授权检测优先于爆破 (#554)
* fix: 修复RDP爆破高误报率问题 (#555)
- 移除 screen.go 中错误的认证结果覆盖逻辑
- 启用 NLA 协议的 ErrorCode 字段检测
- 添加 PubKeyAuth 验证确保认证真正成功
- 修复 io.go 中错误被静默忽略的问题
- 修复 socket.go/io.go 中可能导致 panic 的代码
- 修复 screen.go 中文件句柄泄漏和 log.Panic
* fix: 修复-user/-pwd凭据参数不生效的问题
问题原因:
- Parse()解析凭据后更新globalConfig
- 但BuildConfigFromFlags()创建新Config时使用默认字典
- 导致解析的UserPassPairs等凭据信息被丢弃
修复内容:
1. initialize.go: 将Parse解析的凭据结果应用到新Config
2. credential.go: 单用户密码对时创建UserPassPairs
3. rdp.go: 单凭据测试时跳过指纹识别,减少连接次数
* feat: RDP使用NLA仅验证模式,避免挤掉已登录用户
- 添加ErrNLAAuthSuccess标志用于NLA验证成功信号
- tpkt层支持nlaAuthOnly模式,验证成功后不建立完整会话
- x224层正确传播NLA验证结果
- rdpCrack改用NlaAuth进行凭据验证
* fix: 修复进度条在Windows终端满屏重复输出的问题
- 添加终端宽度检测,动态调整进度条长度
- 使用空格覆盖清除旧内容,避免残留
- 简化进度条格式,确保不超过终端宽度
* feat: 优化日志颜色方案,区分漏洞和普通信息
- 新增 LogVuln 级别(红色),用于漏洞和重要发现
- 密码爆破成功、未授权访问、POC漏洞等改用红色显示
- 普通信息(扫描统计等)改为白色
- Web指纹保持绿色
* refactor: 精简化输出,移除冗余启动信息
- 移除showParseSummary开局配置输出
- 移除LogPluginInfo/LogPluginInfoWithPort插件信息输出
- 移除alive_scanner冗余统计输出
- 移除port_scan_start扫描开始提示
- 移除handleUDPPorts SNMP死代码
- 移除相关i18n条目
* chore: 版本号更新为2.1.1
* fix: 降级依赖版本以保持Go 1.20兼容性
* feat(ldap): 添加NTLM Hash认证支持 (#433)
* chore: 清理无用的 replace 指令
* fix(ping): 修复 TTL expired 导致主机误判为存活的问题
在 ExecCommandPing 中增加错误关键词检测,当 ping 输出包含
TTL expired、Destination unreachable 等错误信息时,不再将
目标主机标记为存活。
Fixes #454
* fix(proxy): 修复透明代理导致输出全端口的问题
在代理初始化时主动探测代理行为,通过连接 RFC 5737 保留的
测试地址来检测是否存在"全回显"问题。如果探测到代理不可靠,
则在端口扫描时跳过所有端口,避免误报。
- 新增 proxyReliable 标志位标记代理可靠性
- 新增 ProbeProxyBehavior 函数探测代理行为
- 端口扫描前检查代理可靠性并输出警告
Fixes #495
* refactor: 移动debug模块到common/debug子包
* fix(web): 修复-u模式下Web插件未执行的问题
* fix: 优化输出格式和颜色显示
- 网段统计格式改为 10.253.0.0/16 网段存活: 26
- WebTitle基础信息改为白色,指纹识别单独绿色输出
- 移除重复的端口数量输出
* fix: URL解析自动补全协议头
-uf 文件中 192.168.1.1:8080 自动转为 http://192.168.1.1:8080
* fix: 修复-u/-uf模式下URLs丢失导致0目标扫描的问题
Parse阶段将URLs设置到全局状态,但Initialize随后创建新状态
并覆盖了全局状态,导致URLs数据丢失。现在在创建新状态前
先保存并迁移Parse阶段设置的URLs和HostPorts数据。
* fix: 智能检测HTTP/HTTPS协议并优化URL显示
- 修复-u/-uf模式URLs丢失导致0目标扫描问题
- detectProtocol改为主动TLS握手检测,不依赖服务名
- WebTitle输出显示完整协议(http/https)
- 隐藏标准端口(80/443)使输出更简洁
* refactor: 精简parsers包,统一配置构建入口
- 删除冗余的中间层(XXXInput、XXXParser类)
- 新增 config_builder.go 统一配置构建
- parsers包从3000+行精简至~540行
- 保留核心函数:ParseIP、ParsePort、文件读取、凭据解析
* test: 扩展parsers单元测试覆盖边缘情况
- 新增内网简写解析测试(192/172/10)
- 新增完整IP范围和无效CIDR测试
- 新增Windows行尾(CRLF)处理测试
- 新增凭据和哈希文件解析测试
- 新增端口解析边缘情况测试
- 测试覆盖率达到94.2%
* refactor: 优化控制台输出格式
- 去掉时间戳,保留[*][+]前缀
- Web输出合并WebTitle和WebFinger为一行
- 有指纹显示绿色[+],无指纹显示白色[*]
- 格式: code:xxx len:xxx title:xxx server:xxx [指纹]
- 服务探测格式: [Product:xxx ||Version:xxx] Banner:(xxx)
- 字段对齐,输出更清爽
* feat: 添加凭据测试未发现弱密码的提示
- credential_tester.go: 失败时设置 Type=ResultTypeCredential
- scanner.go: 根据结果类型在 error 级别输出'未发现弱密码'提示
- 新增 i18n 翻译 brute_no_weak_pass
使用 -log all 或 -log error 可看到此提示
* refactor(logging): 重构日志级别为层级过滤设计
- LogLevel 从 string 改为 int 类型,支持层级比较
- 层级设计:Debug(0) < Base(1) < Info(2) < Success(3) < Vuln(4) < Error(5)
- 设置一个级别后,显示该级别及以上的日志
- Error 级别始终显示,不会被配置过滤掉
- 保留向后兼容别名(LevelAll, LevelInfoSuccess 等)
- 更新测试以匹配新的层级过滤行为
* style(logging): Error级别日志改为黄色显示
* style(findnet): NetInfo输出改为每行一个IP
* refactor(ms17010): 优化错误提示,明确指出SMBv1不支持等情况
* fix(credential): 修复凭据测试结果不一致的问题
问题原因:
1. 未知错误类型不重试,导致服务端限流时跳过正确密码
2. SSH 错误分类不够准确,某些临时错误未被识别
修复内容:
1. 未知错误改为可重试(可能是临时问题)
2. 增加 SSH 特有的网络错误识别(handshake failed, disconnect 等)
* fix(portfinger): 修复SMB2服务指纹识别和NetInfo输出问题
- 添加SMB2ProgNeg探针支持现代Windows的SMB2协议
- 修复Go regexp对高位字节的UTF-8兼容问题,使用Latin-1转换
- 修复探针失败后连接重建逻辑
- 修复vendor_product字段名不匹配问题
- 修复NetInfo多行输出被其他日志打断的问题
* fix(config): 从默认端口移除9100,避免触发打印机打印 (#517)
* feat(proxy): 增强代理端口扫描的深度验证机制
- 新增4阶段深度验证:Banner读取→探测发送→响应等待→最终判定
- 新增SOCKS5错误码和代理错误文本检测
- 优化ProbeProxyBehavior探测逻辑,发送数据验证连接可达性
- 解决透明代理/全回显代理导致的假阳性问题
* fix(proxy): 修复代理深度验证的若干问题
- detector.go: 修复 AutoConfigureProxy 覆盖探测结果的问题
只有未探测过时才设置默认 proxyReliable 值
- port_scan.go: 改进深度验证机制
- 使用带 Host header 的 HTTP GET 请求替代 OPTIONS
- 延长响应等待超时至 2s 以适配慢速服务器
- 正确重置连接 deadline 避免影响后续操作
* refactor: 统一 common 包文件命名风格
Flag.go -> flag.go
* refactor(proxy): 删除自定义 contains() 函数,改用标准库
- 用 strings.Contains() 替代手写的 contains()
- 删除过时的注释
* fix(parsers): 修复带横杠域名被误识别为IP范围的问题
如 111-555.sss.com 这类域名因包含 - 被错误解析为 IP 范围,
添加 looksLikeIPRange() 检查,只有 - 前是有效 IP 才走范围解析
* fix(proxy): 修复代理模式下服务识别错误和端口漏扫问题
- port_scan.go: 验证通过后重建干净连接,避免HTTP GET探测污染服务识别
- port_scan.go: 优化验证策略,用轻量CRLF探测替代HTTP GET,超时从2.2s降至0.6s
- manager.go: 修正ProbeProxyBehavior判断逻辑,超时应视为代理正常转发
* fix(pool): 移除线程池预分配,优化大规模扫描内存占用
WithPreAlloc(true) 会预先创建所有 worker goroutine,
在大规模扫描(如 25域名×65535端口)时可能导致内存问题
* refactor(logging): 统一日志前缀,删除废弃的 LogBase
- 删除 LogBase 函数,所有调用迁移到 LogInfo/LogError
- 新增 PrefixDebug ([.]) 前缀,所有日志级别现在都有前缀
- 修复日志输出缩进不一致的问题
- 删除未使用的 PrefixDefault 常量
* perf(icmp): 实现自适应等待算法优化存活检测性能
- 新增 waitAdaptive 函数,监控响应增量实现智能提前结束
- 算法保守原则:最小等待1s + 连续500ms无新响应才提前结束
- 添加100ms检查间隔避免CPU空转
- 保留原有最大等待时间(3s/6s)作为兜底
- 添加完整单元测试覆盖各种场景
优化效果:
- 全部响应:~100ms (原3s)
- 无响应:~1s (原3s)
- 部分响应后稳定:~1.5s (原3s)
* perf(scan): 实现启发式优化提升扫描体验
1. 端口优先级排序:高价值端口(80,443,22,3389等)优先扫描
- 用户能更快看到有意义的结果
- 不影响端口喷洒策略
2. TCP 补充探测:ICMP 响应率<10%时自动启用
- 对未响应主机用 TCP 80/443/22/445 补充探测
- 解决防火墙过滤 ICMP 导致漏检的问题
* refactor(grdp): 精简RDP库,删除认证检测不需要的代码
- 删除 VNC 协议支持 (protocol/rfb, client/rfb.go)
- 删除完整客户端框架 (client/)
- 删除 RemoteApp 等插件 (plugin/)
- 删除 RLE 图形解压 (core/rle.go)
- 删除绘图指令处理 (pdu/orders.go, pdu/gdi.go)
- 精简 screen.go,移除截图和完整会话功能
- 移除未使用的 RGB 转换函数
grdp 代码从 13,044 行精简至 7,581 行,削减 42%
* refactor(common): 删除死代码,优化代码风格
- 删除未使用的 joinStrings/joinInts 函数
- 删除未使用的 memStats 字段和 getMemoryInfo 方法
- 简化 parsePasswords 中的循环为 append(...) 形式
* refactor(services): 统一数据库插件的DBWrapper
4个数据库插件(MySQL、PostgreSQL、MSSQL、Oracle)都有相同的sql.DB包装代码,
合并为通用的SQLDBWrapper,减少重复。
* refactor(core,grdp): 删除未使用的死代码
- 移除 BaseScanStrategy.LogPluginInfoWithPort 方法(无调用者)
- 移除 mcs.go 中被注释的旧 connect 函数实现
* refactor: 删除 deadcode 检测出的未使用函数
- proxy/detector.go: 删除 IsSOCKS5Standard, IsProxyInitialized
- findnet.go: 删除 NetworkInfo.OneLine, TreeFormat 方法
- port_scan.go: 删除 estimateScanTime 函数
- web_scanner.go: 删除 GetFingerprints 函数
- 清理相关测试代码
* refactor: 删除更多未使用的死代码
- parse.go: 删除 RemoveDuplicate 函数及其测试
- parsers.go: 删除 excludeHosts, removeDuplicates 别名函数
- 更新测试使用真正的函数名
* fix(test): 修复 TestParseIP_InvalidIPRange 测试用例
- 删除不合理的测试用例(无效IP被当作普通主机名处理是设计行为)
- 修复测试逻辑,只在真正通过时输出"正确"
* fix(scan): 移除域名预解析,保留原始域名进行扫描
域名预解析会将域名转换为IP,导致虚拟主机场景下HTTP访问失败
(Host头变成IP而非域名,无法正确路由)
* fix(scan): 修复 -hf 参数无法单独使用的问题
* fix(proxy): 修复透明代理环境下 SOCKS5 代理全端口误报问题
问题:在透明代理(TUN模式)环境下使用 SOCKS5 代理扫描时,
会出现全端口开放的误报,因为代理可靠性检测被透明代理污染。
修复方案(参考 fscanx):
1. 将探针从 CRLF 改为 HTTP GET,更有效检测真实连接状态
2. 删除 "uncertain" 状态,无响应一律判定为端口关闭
3. 调整超时时间以适应代理链路延迟
Fixes #524
* feat(telnet): 新增 telnetd RCE 命令执行验证,修复未授权访问日志级别
* fix: 修复 i18n.Tr vet 报错、Unicode 测试用例,移除过期域名
- 移除 i18n.Tr 中错误的 fmt.Sprintf fallback,消除 go vet 误报
- 修复 match_engine_test Unicode 测试用例与 Latin-1 转换逻辑不匹配
- README 移除过期的 fscan.club 域名
- 添加 .gitattributes 统一换行符为 LF
* refactor: 统一控制台输出风格,使用统一的日志函数
手动合并 PR #558 的改动,适配重构后的代码路径
* fix(ci): 修复版本注入和CI触发配置
- goreleaser ldflags 指向正确的包路径 common.version/commit/date
- version 改为 var 支持 ldflags 注入,banner 显示 commit 和构建日期
- test-build 触发分支增加 dev-* 通配
* fix(ci): 修复 Windows 产物 .exe.exe 双后缀问题
* feat(ci): 扩展构建架构支持 MIPS/ARM/FreeBSD/Solaris
This commit is contained in:
@@ -0,0 +1,6 @@
|
||||
package i18n
|
||||
|
||||
import "embed"
|
||||
|
||||
//go:embed locales/*.yaml
|
||||
var localeFS embed.FS
|
||||
@@ -0,0 +1,89 @@
|
||||
package i18n
|
||||
|
||||
import (
|
||||
"fmt"
|
||||
"sync"
|
||||
|
||||
"github.com/nicksnyder/go-i18n/v2/i18n"
|
||||
"golang.org/x/text/language"
|
||||
"gopkg.in/yaml.v3"
|
||||
)
|
||||
|
||||
// 支持的语言常量
|
||||
const (
|
||||
LangZH = "zh"
|
||||
LangEN = "en"
|
||||
)
|
||||
|
||||
// 默认配置
|
||||
const (
|
||||
DefaultLanguage = LangZH
|
||||
FallbackLanguage = LangEN
|
||||
)
|
||||
|
||||
var (
|
||||
bundle *i18n.Bundle
|
||||
localizer *i18n.Localizer
|
||||
lang = DefaultLanguage
|
||||
mu sync.RWMutex
|
||||
)
|
||||
|
||||
func init() {
|
||||
bundle = i18n.NewBundle(language.Chinese)
|
||||
bundle.RegisterUnmarshalFunc("yaml", yaml.Unmarshal)
|
||||
|
||||
// 从embed加载翻译文件
|
||||
if _, err := bundle.LoadMessageFileFS(localeFS, "locales/zh.yaml"); err != nil {
|
||||
panic(fmt.Sprintf("failed to load zh.yaml: %v", err))
|
||||
}
|
||||
if _, err := bundle.LoadMessageFileFS(localeFS, "locales/en.yaml"); err != nil {
|
||||
panic(fmt.Sprintf("failed to load en.yaml: %v", err))
|
||||
}
|
||||
|
||||
localizer = i18n.NewLocalizer(bundle, lang, FallbackLanguage)
|
||||
}
|
||||
|
||||
// SetLanguage 设置当前语言
|
||||
func SetLanguage(l string) {
|
||||
mu.Lock()
|
||||
defer mu.Unlock()
|
||||
lang = l
|
||||
localizer = i18n.NewLocalizer(bundle, lang, FallbackLanguage)
|
||||
}
|
||||
|
||||
// GetText 获取国际化文本(无参数)
|
||||
func GetText(key string) string {
|
||||
mu.RLock()
|
||||
loc := localizer
|
||||
mu.RUnlock()
|
||||
|
||||
msg, err := loc.Localize(&i18n.LocalizeConfig{
|
||||
MessageID: key,
|
||||
})
|
||||
if err != nil || msg == "" {
|
||||
return key
|
||||
}
|
||||
return msg
|
||||
}
|
||||
|
||||
// Tr 获取国际化文本并格式化(变参版本)
|
||||
// 参数按顺序映射为 {{.Arg1}}, {{.Arg2}}, ...
|
||||
func Tr(key string, args ...interface{}) string {
|
||||
mu.RLock()
|
||||
loc := localizer
|
||||
mu.RUnlock()
|
||||
|
||||
data := make(map[string]interface{})
|
||||
for i, arg := range args {
|
||||
data[fmt.Sprintf("Arg%d", i+1)] = arg
|
||||
}
|
||||
|
||||
msg, err := loc.Localize(&i18n.LocalizeConfig{
|
||||
MessageID: key,
|
||||
TemplateData: data,
|
||||
})
|
||||
if err != nil || msg == "" {
|
||||
return key
|
||||
}
|
||||
return msg
|
||||
}
|
||||
@@ -0,0 +1,755 @@
|
||||
# fscan English translation file
|
||||
# Contains only actually used messages (115)
|
||||
|
||||
# ========================= Command Line Arguments (71) =========================
|
||||
flag_host:
|
||||
other: "Target host: IP, IP range, IP file, domain"
|
||||
flag_exclude_hosts:
|
||||
other: "Exclude hosts"
|
||||
flag_exclude_hosts_file:
|
||||
other: "Exclude hosts file"
|
||||
flag_ports:
|
||||
other: "Ports: default 1000 common ports"
|
||||
flag_exclude_ports:
|
||||
other: "Exclude ports"
|
||||
flag_hosts_file:
|
||||
other: "Hosts file"
|
||||
flag_ports_file:
|
||||
other: "Ports file"
|
||||
flag_scan_mode:
|
||||
other: "Scan mode: all(all plugins), icmp(alive detection), or specific plugin names"
|
||||
flag_thread_num:
|
||||
other: "Port scan thread count"
|
||||
flag_timeout:
|
||||
other: "Port scan timeout"
|
||||
flag_module_thread_num:
|
||||
other: "Module thread count"
|
||||
flag_global_timeout:
|
||||
other: "Global timeout"
|
||||
flag_disable_ping:
|
||||
other: "Disable ping detection"
|
||||
flag_alive_only:
|
||||
other: "Alive detection only"
|
||||
flag_username:
|
||||
other: "Username"
|
||||
flag_password:
|
||||
other: "Password"
|
||||
flag_add_users:
|
||||
other: "Additional usernames"
|
||||
flag_add_passwords:
|
||||
other: "Additional passwords"
|
||||
flag_users_file:
|
||||
other: "Username dictionary file"
|
||||
flag_passwords_file:
|
||||
other: "Password dictionary file"
|
||||
flag_userpass_file:
|
||||
other: "Username:password pairs file"
|
||||
flag_hash_file:
|
||||
other: "Hash file"
|
||||
flag_hash_value:
|
||||
other: "Hash value"
|
||||
flag_domain:
|
||||
other: "Domain name"
|
||||
flag_ssh_key:
|
||||
other: "SSH private key file"
|
||||
flag_target_url:
|
||||
other: "Target URL"
|
||||
flag_urls_file:
|
||||
other: "URLs file"
|
||||
flag_cookie:
|
||||
other: "HTTP Cookie"
|
||||
flag_web_timeout:
|
||||
other: "Web timeout"
|
||||
flag_max_redirects:
|
||||
other: "Maximum HTTP redirects"
|
||||
flag_http_proxy:
|
||||
other: "HTTP proxy"
|
||||
flag_socks5_proxy:
|
||||
other: "Use SOCKS5 proxy (e.g.: 127.0.0.1:1080)"
|
||||
flag_iface:
|
||||
other: "Specify local interface IP address (VPN scenario, e.g.: 10.8.0.5)"
|
||||
flag_poc_path:
|
||||
other: "POC script path"
|
||||
flag_poc_name:
|
||||
other: "POC name"
|
||||
flag_poc_full:
|
||||
other: "Full POC scan"
|
||||
flag_dns_log:
|
||||
other: "DNS logging"
|
||||
flag_poc_num:
|
||||
other: "POC concurrency"
|
||||
flag_no_poc:
|
||||
other: "Disable POC scan"
|
||||
flag_redis_file:
|
||||
other: "Redis file"
|
||||
flag_redis_shell:
|
||||
other: "Redis Shell"
|
||||
flag_redis_write_path:
|
||||
other: "Redis write path"
|
||||
flag_redis_write_content:
|
||||
other: "Redis write content"
|
||||
flag_redis_write_file:
|
||||
other: "Redis write file"
|
||||
flag_disable_redis:
|
||||
other: "Disable Redis exploitation"
|
||||
flag_disable_brute:
|
||||
other: "Disable brute force"
|
||||
flag_max_retries:
|
||||
other: "Maximum retries"
|
||||
flag_packet_rate_limit:
|
||||
other: "Maximum packets per minute (0 means no limit)"
|
||||
flag_max_packet_count:
|
||||
other: "Maximum total packet count for entire program (0 means no limit)"
|
||||
flag_icmp_rate:
|
||||
other: "ICMP packet rate (ratio to max rate, default 0.1, ~1463 pps)"
|
||||
flag_output_file:
|
||||
other: "Output file"
|
||||
flag_output_format:
|
||||
other: "Output format: txt, json, csv"
|
||||
flag_disable_save:
|
||||
other: "Disable result saving"
|
||||
flag_silent_mode:
|
||||
other: "Silent mode"
|
||||
flag_no_color:
|
||||
other: "Disable color output"
|
||||
flag_log_level:
|
||||
other: "Log level"
|
||||
flag_disable_progress:
|
||||
other: "Disable progress bar"
|
||||
flag_shellcode:
|
||||
other: "Shellcode"
|
||||
flag_reverse_shell_target:
|
||||
other: "Reverse shell target address:port (e.g.: 192.168.1.100:4444)"
|
||||
flag_start_socks5_server:
|
||||
other: "Start SOCKS5 proxy server on port (e.g.: 1080)"
|
||||
flag_forward_shell_port:
|
||||
other: "Start forward shell server on port (e.g.: 4444)"
|
||||
flag_persistence_file:
|
||||
other: "Linux persistence target file path (supports .elf/.sh files)"
|
||||
flag_win_pe_file:
|
||||
other: "Windows persistence target PE file path (supports .exe/.dll files)"
|
||||
flag_keylogger_output:
|
||||
other: "Keylogger output file path"
|
||||
flag_download_url:
|
||||
other: "URL of the file to download"
|
||||
flag_download_path:
|
||||
other: "Save path for downloaded file"
|
||||
flag_language:
|
||||
other: "Language: zh, en"
|
||||
flag_help:
|
||||
other: "Show help information"
|
||||
# ========================= Scan Mode Messages =========================
|
||||
scan_mode_service_selected:
|
||||
other: "Service scan mode selected"
|
||||
scan_mode_alive_selected:
|
||||
other: "Alive detection mode selected"
|
||||
scan_mode_local_selected:
|
||||
other: "Local scan mode selected"
|
||||
scan_mode_web_selected:
|
||||
other: "Web scan mode selected"
|
||||
scan_info_start:
|
||||
other: "Starting information scan"
|
||||
scan_host_start:
|
||||
other: "Starting host scan"
|
||||
scan_vulnerability_start:
|
||||
other: "Starting vulnerability scan"
|
||||
scan_no_service_plugins:
|
||||
other: "No available service plugins found"
|
||||
|
||||
# ========================= Scan Strategy Messages =========================
|
||||
scan_strategy_alive_name:
|
||||
other: "Alive Detection"
|
||||
scan_strategy_alive_desc:
|
||||
other: "Fast detection of host alive status"
|
||||
scan_strategy_local_name:
|
||||
other: "Local Scan"
|
||||
scan_strategy_local_desc:
|
||||
other: "Collect local system information"
|
||||
scan_strategy_service_name:
|
||||
other: "Service Scan"
|
||||
scan_strategy_service_desc:
|
||||
other: "Scan host services and vulnerabilities"
|
||||
scan_strategy_web_name:
|
||||
other: "Web Scan"
|
||||
scan_strategy_web_desc:
|
||||
other: "Scan web application vulnerabilities and information"
|
||||
|
||||
# ========================= Alive Detection Messages =========================
|
||||
scan_alive_start:
|
||||
other: "Starting alive detection"
|
||||
scan_alive_summary_title:
|
||||
other: "Alive Detection Summary"
|
||||
scan_alive_hosts_list:
|
||||
other: "Alive hosts list:"
|
||||
|
||||
# ========================= Progress Messages =========================
|
||||
progress_scanning_description:
|
||||
other: "Scanning Progress"
|
||||
progress_scan_completed:
|
||||
other: "Scan Completed:"
|
||||
concurrency_plugin:
|
||||
other: "Plugins"
|
||||
concurrency_local_plugin:
|
||||
other: "Local Plugins"
|
||||
concurrency_service_plugin:
|
||||
other: "Service Plugins"
|
||||
concurrency_web_plugin:
|
||||
other: "Web Plugins"
|
||||
|
||||
# ========================= Parse Error Messages =========================
|
||||
parse_error_target_empty:
|
||||
other: "Target input is empty"
|
||||
parse_error_no_hosts:
|
||||
other: "No valid target hosts found after parsing"
|
||||
parse_error_empty_input:
|
||||
other: "Input parameters are empty"
|
||||
parse_error_parser_not_init:
|
||||
other: "Parser not initialized"
|
||||
target_local_mode:
|
||||
other: "Local scan mode"
|
||||
param_conflict_ao_icmp_both:
|
||||
other: "Note: Both -ao and -m icmp specified, both enable alive detection mode"
|
||||
|
||||
# ========================= Parser Messages =========================
|
||||
parser_empty_input:
|
||||
other: "Input parameters are empty"
|
||||
parser_file_scan_failed:
|
||||
other: "File scan failed"
|
||||
parser_username_invalid_chars:
|
||||
other: "Username contains invalid characters"
|
||||
parser_password_empty:
|
||||
other: "Empty passwords not allowed"
|
||||
parser_hash_empty:
|
||||
other: "Hash value is empty"
|
||||
parser_hash_invalid_format:
|
||||
other: "Invalid hash format, requires 32-character hexadecimal"
|
||||
|
||||
# ========================= Config Messages =========================
|
||||
config_web_timeout_warning:
|
||||
other: "Web timeout is larger than normal timeout, may cause unexpected behavior"
|
||||
|
||||
# ========================= Plugin Scan Messages (with parameters) =========================
|
||||
scan_plugin_not_found:
|
||||
other: "No plugin found for scan type {{.Arg1}}, skipped"
|
||||
|
||||
# ========================= SSH Plugin Messages =========================
|
||||
ssh_key_auth_success:
|
||||
other: "SSH key authentication successful: {{.Arg1}} [{{.Arg2}}]"
|
||||
ssh_pwd_auth_success:
|
||||
other: "SSH password authentication successful: {{.Arg1}} [{{.Arg2}}:{{.Arg3}}]"
|
||||
ssh_key_read_failed:
|
||||
other: "Failed to read SSH private key: {{.Arg1}}"
|
||||
ssh_service_identified:
|
||||
other: "SSH service identified: {{.Arg1}} - {{.Arg2}}"
|
||||
|
||||
# ========================= Redis Plugin Messages =========================
|
||||
redis_unauth_success:
|
||||
other: "Redis unauthorized access: {{.Arg1}}"
|
||||
redis_service_identified:
|
||||
other: "Redis service identified: {{.Arg1}} - {{.Arg2}}"
|
||||
|
||||
# ========================= ICMP Messages =========================
|
||||
trying_no_listen_icmp:
|
||||
other: "Trying no-listen ICMP detection"
|
||||
insufficient_privileges:
|
||||
other: "Insufficient privileges for raw ICMP detection"
|
||||
switching_to_ping:
|
||||
other: "Switching to ping command mode"
|
||||
icmp_listen_failed:
|
||||
other: "ICMP listen failed: {{.Arg1}}"
|
||||
icmp_connect_failed:
|
||||
other: "ICMP connect failed: {{.Arg1}}"
|
||||
icmp_listener_panic:
|
||||
other: "ICMP listener goroutine panic: {{.Arg1}}"
|
||||
host_alive:
|
||||
other: "{{.Arg1}} alive (protocol: {{.Arg2}})"
|
||||
proxy_mode_disable_icmp:
|
||||
other: "Proxy mode detected, disabling ICMP scan"
|
||||
segment_16_alive:
|
||||
other: "{{.Arg1}}.0.0/16 segment alive: {{.Arg2}}"
|
||||
segment_24_alive:
|
||||
other: "{{.Arg1}}.0/24 segment alive: {{.Arg2}}"
|
||||
tcp_probe_low_icmp_rate:
|
||||
other: "Low ICMP response rate ({{.Arg1}}), enabling TCP supplementary probe ({{.Arg2}} hosts)"
|
||||
tcp_probe_found:
|
||||
other: "TCP probe found {{.Arg1}} alive hosts"
|
||||
|
||||
# ========================= Alive Scan Stats Messages =========================
|
||||
parse_target_failed:
|
||||
other: "Parse target failed: {{.Arg1}}"
|
||||
alive_scan_start_single:
|
||||
other: "Starting alive scan: {{.Arg1}}"
|
||||
alive_scan_start_multi:
|
||||
other: "Starting alive scan: {{.Arg1}} targets (first: {{.Arg2}})"
|
||||
alive_total_hosts:
|
||||
other: "Total hosts: {{.Arg1}}"
|
||||
alive_hosts_count:
|
||||
other: "Alive hosts: {{.Arg1}}"
|
||||
alive_dead_hosts:
|
||||
other: "Dead hosts: {{.Arg1}}"
|
||||
alive_success_rate:
|
||||
other: "Success rate: {{.Arg1}}"
|
||||
alive_scan_duration:
|
||||
other: "Scan duration: {{.Arg1}}"
|
||||
alive_host_item:
|
||||
other: " [{{.Arg1}}] {{.Arg2}}"
|
||||
|
||||
# ========================= Scanner Messages =========================
|
||||
http_client_init_failed:
|
||||
other: "HTTP client initialization failed: {{.Arg1}}"
|
||||
active_reverse_shell:
|
||||
other: "Active reverse shell detected, keeping program running..."
|
||||
active_socks5_proxy:
|
||||
other: "Active SOCKS5 proxy detected, keeping program running..."
|
||||
active_forward_shell:
|
||||
other: "Active forward shell detected, keeping program running..."
|
||||
press_ctrl_c_exit:
|
||||
other: "Press Ctrl+C to exit"
|
||||
received_exit_signal:
|
||||
other: "Received exit signal, shutting down..."
|
||||
scan_task_complete:
|
||||
other: "Scan task complete, duration {{.Arg1}}, scanned {{.Arg2}} targets"
|
||||
plugin_panic:
|
||||
other: "Plugin {{.Arg1}} panic while scanning {{.Arg2}}:{{.Arg3}}: {{.Arg4}}"
|
||||
plugin_scan_error:
|
||||
other: "Plugin scan error {{.Arg1}}:{{.Arg2}} - {{.Arg3}}"
|
||||
brute_no_weak_pass:
|
||||
other: "{{.Arg1}}:{{.Arg2}} {{.Arg3}} no weak password found"
|
||||
|
||||
# ========================= Port Scan Messages =========================
|
||||
invalid_port:
|
||||
other: "Invalid port: {{.Arg1}}"
|
||||
port_scan_start:
|
||||
other: "Starting port scan, {{.Arg1}} tasks, estimated {{.Arg2}} seconds ({{.Arg3}} minutes)"
|
||||
thread_pool_create_failed:
|
||||
other: "Failed to create thread pool: {{.Arg1}}"
|
||||
port_scan_complete:
|
||||
other: "Scan complete, found {{.Arg1}} open ports"
|
||||
scan_failure_rate_high:
|
||||
other: "Scan failure rate too high: {{.Arg1}} ({{.Arg2}}/{{.Arg3}} failed)"
|
||||
scan_failure_reason:
|
||||
other: "Possible reason: Thread count too high causing resource exhaustion"
|
||||
scan_reduce_threads_suggestion:
|
||||
other: "Suggestion: Reduce thread count (current {{.Arg1}}) to 50-100, or increase system ulimit"
|
||||
scan_partial_failure:
|
||||
other: "Partial port scan failure: {{.Arg1}} ({{.Arg2}}/{{.Arg3}})"
|
||||
scan_reduce_threads_accuracy:
|
||||
other: "Suggestion: Reduce thread count (current {{.Arg1}}) to improve accuracy"
|
||||
resource_exhausted_warning:
|
||||
other: "Resource exhausted errors {{.Arg1}} times, suggest reducing thread count (-t) or increase ulimit"
|
||||
port_open:
|
||||
other: "Port open {{.Arg1}}"
|
||||
port_open_http:
|
||||
other: "Port open {{.Arg1}} [http](HTTP probe)"
|
||||
|
||||
# ========================= Local Scan Messages =========================
|
||||
local_plugin_info:
|
||||
other: "Local plugin: {{.Arg1}}"
|
||||
local_plugin_not_specified:
|
||||
other: "Local plugin: Not specified"
|
||||
local_plugin_not_found:
|
||||
other: "Error: Local plugin '{{.Arg1}}' does not exist or is not available on current platform"
|
||||
|
||||
# ========================= Service Scan Messages =========================
|
||||
service_plugin_info:
|
||||
other: "Service plugins: {{.Arg1}}"
|
||||
service_plugin_custom:
|
||||
other: "Service plugins: Custom specified ({{.Arg1}})"
|
||||
service_plugin_none:
|
||||
other: "Service plugins: None available"
|
||||
port_out_of_range:
|
||||
other: "Port out of range: {{.Arg1}} (valid range: 1-65535)"
|
||||
invalid_target_format:
|
||||
other: "Invalid target format: {{.Arg1}}"
|
||||
host_port_invalid:
|
||||
other: "Host {{.Arg1}} port format invalid: {{.Arg2}}"
|
||||
host_port_out_of_range:
|
||||
other: "Host {{.Arg1}} port out of range: {{.Arg2}} (valid range: 1-65535)"
|
||||
alive_hosts_count_info:
|
||||
other: "Alive hosts count: {{.Arg1}}"
|
||||
alive_ports_count:
|
||||
other: "Alive ports count: {{.Arg1}}"
|
||||
|
||||
# ========================= Web Scan Messages =========================
|
||||
http_proxy_config_error:
|
||||
other: "HTTP proxy configuration error: {{.Arg1}}"
|
||||
socks5_not_supported_web:
|
||||
other: "Web detection does not support SOCKS5 proxy, recommend using HTTP proxy (-proxy)"
|
||||
url_parse_failed:
|
||||
other: "Failed to parse URL: {{.Arg1}} - {{.Arg2}}"
|
||||
invalid_scan_target:
|
||||
other: "Invalid scan target"
|
||||
poc_load_failed:
|
||||
other: "POC load failed, cannot execute scan"
|
||||
|
||||
# ========================= Base Scan Strategy Messages =========================
|
||||
plugins_custom_specified:
|
||||
other: "{{.Arg1}}: Custom specified ({{.Arg2}})"
|
||||
plugins_info:
|
||||
other: "{{.Arg1}}: {{.Arg2}}"
|
||||
plugins_none:
|
||||
other: "{{.Arg1}}: None available"
|
||||
start_local_scan:
|
||||
other: "Starting local scan"
|
||||
start_service_scan:
|
||||
other: "Starting service scan"
|
||||
start_web_scan:
|
||||
other: "Starting web scan"
|
||||
start_scan:
|
||||
other: "Starting scan"
|
||||
|
||||
# ========================= Service Plugin Messages =========================
|
||||
# Format: {service}_{type} - type: credential/unauth/service/vuln
|
||||
ldap_credential:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
ldap_hash_credential:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}\\{{.Arg3}} [Hash:{{.Arg4}}]"
|
||||
ldap_service:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}"
|
||||
kafka_credential:
|
||||
other: "Kafka {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
kafka_service:
|
||||
other: "Kafka {{.Arg1}} {{.Arg2}}"
|
||||
ftp_service:
|
||||
other: "FTP {{.Arg1}} {{.Arg2}}"
|
||||
rdp_service:
|
||||
other: "RDP {{.Arg1}} {{.Arg2}}"
|
||||
activemq_credential:
|
||||
other: "ActiveMQ {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
activemq_service:
|
||||
other: "ActiveMQ {{.Arg1}} {{.Arg2}}"
|
||||
telnet_credential:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
telnet_service:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}"
|
||||
telnet_unauth_rce:
|
||||
other: "Telnet {{.Arg1}} unauthorized RCE [{{.Arg2}}] {{.Arg3}}"
|
||||
telnet_credential_rce:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}:{{.Arg3}} RCE verified [{{.Arg4}}] {{.Arg5}}"
|
||||
cassandra_credential:
|
||||
other: "Cassandra {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
cassandra_service:
|
||||
other: "Cassandra {{.Arg1}} {{.Arg2}}"
|
||||
cassandra_unauth:
|
||||
other: "Cassandra {{.Arg1}} No authentication required"
|
||||
vnc_unauth:
|
||||
other: "VNC {{.Arg1}} Unauthorized access"
|
||||
vnc_credential:
|
||||
other: "VNC {{.Arg1}} Password: {{.Arg2}}"
|
||||
smtp_credential:
|
||||
other: "SMTP {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
smtp_service:
|
||||
other: "SMTP {{.Arg1}} {{.Arg2}}"
|
||||
mongodb_unauth:
|
||||
other: "MongoDB {{.Arg1}} Unauthorized access"
|
||||
mongodb_credential:
|
||||
other: "MongoDB {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mongodb_auth_required:
|
||||
other: "MongoDB {{.Arg1}} Authentication required"
|
||||
elasticsearch_credential:
|
||||
other: "Elasticsearch {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
elasticsearch_unauth:
|
||||
other: "Elasticsearch {{.Arg1}} Unauthorized access"
|
||||
elasticsearch_service:
|
||||
other: "Elasticsearch {{.Arg1}} {{.Arg2}}"
|
||||
mysql_credential:
|
||||
other: "MySQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mysql_service:
|
||||
other: "MySQL {{.Arg1}} {{.Arg2}}"
|
||||
memcached_unauth:
|
||||
other: "Memcached {{.Arg1}} Unauthorized access"
|
||||
memcached_service:
|
||||
other: "Memcached {{.Arg1}} {{.Arg2}}"
|
||||
rsync_credential:
|
||||
other: "Rsync {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
rsync_service:
|
||||
other: "Rsync {{.Arg1}} {{.Arg2}}"
|
||||
oracle_credential:
|
||||
other: "Oracle {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
oracle_service:
|
||||
other: "Oracle {{.Arg1}} {{.Arg2}}"
|
||||
oracle_default_account:
|
||||
other: "Oracle {{.Arg1}} Default account: {{.Arg2}}:{{.Arg3}}"
|
||||
postgresql_credential:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
postgresql_service:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}"
|
||||
postgresql_vuln:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}"
|
||||
smb_service:
|
||||
other: "SMB {{.Arg1}} {{.Arg2}}"
|
||||
rabbitmq_credential:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
rabbitmq_service:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}"
|
||||
neo4j_unauth:
|
||||
other: "Neo4j {{.Arg1}} Unauthorized access"
|
||||
neo4j_credential:
|
||||
other: "Neo4j {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
neo4j_service:
|
||||
other: "Neo4j {{.Arg1}} {{.Arg2}}"
|
||||
mssql_credential:
|
||||
other: "MSSQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mssql_service:
|
||||
other: "MSSQL {{.Arg1}} {{.Arg2}}"
|
||||
|
||||
# ========================= Vulnerability Detection Messages =========================
|
||||
smbghost_vuln:
|
||||
other: "SMB Ghost {{.Arg1}} CVE-2020-0796 Vulnerable"
|
||||
ms17010_start:
|
||||
other: "MS17-010 exploitation started: {{.Arg1}}"
|
||||
ms17010_complete:
|
||||
other: "MS17-010 exploitation completed: {{.Arg1}}"
|
||||
ms17010_shellcode_complete:
|
||||
other: "{{.Arg1}} MS17-010 exploitation completed (Shellcode length: {{.Arg2}})"
|
||||
ms17010_protocol_decrypt_error:
|
||||
other: "Protocol request decryption error: {{.Arg1}}"
|
||||
ms17010_protocol_decode_error:
|
||||
other: "Protocol request decoding error: {{.Arg1}}"
|
||||
ms17010_session_decrypt_error:
|
||||
other: "Session request decryption error: {{.Arg1}}"
|
||||
ms17010_session_decode_error:
|
||||
other: "Session request decoding error: {{.Arg1}}"
|
||||
ms17010_connect_decrypt_error:
|
||||
other: "Connection request decryption error: {{.Arg1}}"
|
||||
ms17010_connect_decode_error:
|
||||
other: "Connection request decoding error: {{.Arg1}}"
|
||||
ms17010_pipe_decrypt_error:
|
||||
other: "Pipe request decryption error: {{.Arg1}}"
|
||||
ms17010_pipe_decode_error:
|
||||
other: "Pipe request decoding error: {{.Arg1}}"
|
||||
|
||||
# ========================= Redis Plugin Messages =========================
|
||||
redis_reconnect_failed:
|
||||
other: "Failed to reconnect to Redis: {{.Arg1}}"
|
||||
redis_config_failed:
|
||||
other: "Failed to get Redis config: {{.Arg1}}"
|
||||
redis_write_failed:
|
||||
other: "File write failed: {{.Arg1}}"
|
||||
redis_write_success:
|
||||
other: "Successfully wrote file: {{.Arg1}}"
|
||||
redis_read_failed:
|
||||
other: "Failed to read local file: {{.Arg1}}"
|
||||
redis_file_write_success:
|
||||
other: "Successfully wrote content of {{.Arg1}} to {{.Arg2}}"
|
||||
redis_ssh_key_failed:
|
||||
other: "SSH key write failed: {{.Arg1}}"
|
||||
redis_ssh_key_success:
|
||||
other: "SSH key written successfully"
|
||||
redis_cron_failed:
|
||||
other: "Cron job write failed: {{.Arg1}}"
|
||||
redis_cron_success:
|
||||
other: "Cron job written successfully"
|
||||
redis_restore_failed:
|
||||
other: "Failed to restore database config: {{.Arg1}}"
|
||||
|
||||
# ========================= Local Plugin Messages =========================
|
||||
# Cron task persistence
|
||||
crontask_success:
|
||||
other: "Cron task persistence completed: {{.Arg1}} methods succeeded"
|
||||
|
||||
# Keylogger
|
||||
keylogger_success:
|
||||
other: "Keylogging completed, captured {{.Arg1}} keyboard events"
|
||||
keylogger_save_failed:
|
||||
other: "Failed to save keylog: {{.Arg1}}"
|
||||
keylogger_no_input:
|
||||
other: "No keyboard input captured"
|
||||
|
||||
# Environment info
|
||||
envinfo_sensitive:
|
||||
other: "Found sensitive environment variable: {{.Arg1}}"
|
||||
|
||||
# Windows WMI
|
||||
winwmi_success:
|
||||
other: "Windows WMI event subscription persistence completed: {{.Arg1}} items"
|
||||
|
||||
# Cleaner
|
||||
cleaner_success:
|
||||
other: "Trace cleaning completed: {{.Arg1}} files, {{.Arg2}} system entries"
|
||||
cleaner_history_found:
|
||||
other: "Found history file: {{.Arg1}} (requires manual cleanup)"
|
||||
|
||||
# Downloader
|
||||
downloader_success:
|
||||
other: "File download completed: {{.Arg1}} -> {{.Arg2}} (size: {{.Arg3}} bytes)"
|
||||
|
||||
# Forward shell
|
||||
forwardshell_complete:
|
||||
other: "Forward shell service completed - port: {{.Arg1}}"
|
||||
forwardshell_started:
|
||||
other: "Forward shell server started on 0.0.0.0:{{.Arg1}}"
|
||||
forwardshell_accept_failed:
|
||||
other: "Failed to accept connection: {{.Arg1}}"
|
||||
forwardshell_client_connected:
|
||||
other: "Client connected from: {{.Arg1}}"
|
||||
forwardshell_read_failed:
|
||||
other: "Failed to read client command: {{.Arg1}}"
|
||||
|
||||
# AV detection
|
||||
avdetect_load_failed:
|
||||
other: "Failed to load AV database: {{.Arg1}}"
|
||||
avdetect_loaded:
|
||||
other: "Loaded {{.Arg1}} AV product info"
|
||||
avdetect_found:
|
||||
other: "Detected AV: {{.Arg1}} ({{.Arg2}} processes)"
|
||||
avdetect_process:
|
||||
other: " - {{.Arg1}}"
|
||||
|
||||
# Windows startup folder
|
||||
winstartup_success:
|
||||
other: "Windows startup folder persistence completed: {{.Arg1}} methods"
|
||||
|
||||
# File info
|
||||
fileinfo_sensitive:
|
||||
other: "Found sensitive file: {{.Arg1}}"
|
||||
fileinfo_potential:
|
||||
other: "Found potentially sensitive file: {{.Arg1}}"
|
||||
|
||||
# DC info
|
||||
dcinfo_not_joined:
|
||||
other: "Current computer is not joined to a domain"
|
||||
dcinfo_success:
|
||||
other: "Domain controller info collection completed: {{.Arg1}} categories succeeded"
|
||||
|
||||
# Windows service
|
||||
winservice_success:
|
||||
other: "Windows service persistence completed: {{.Arg1}} items"
|
||||
|
||||
# Shell environment
|
||||
shellenv_success:
|
||||
other: "Shell environment persistence completed: {{.Arg1}} methods succeeded"
|
||||
|
||||
# LD_PRELOAD
|
||||
ldpreload_success:
|
||||
other: "LD_PRELOAD persistence completed: {{.Arg1}} methods succeeded"
|
||||
|
||||
# SOCKS5 proxy
|
||||
socks5_starting:
|
||||
other: "Starting SOCKS5 proxy on port {{.Arg1}}"
|
||||
socks5_complete:
|
||||
other: "SOCKS5 proxy completed - port: {{.Arg1}}"
|
||||
socks5_started:
|
||||
other: "SOCKS5 proxy server started on 127.0.0.1:{{.Arg1}}"
|
||||
socks5_cancelled:
|
||||
other: "SOCKS5 proxy server cancelled by context"
|
||||
socks5_accept_failed:
|
||||
other: "Failed to accept connection: {{.Arg1}}"
|
||||
socks5_handshake_failed:
|
||||
other: "SOCKS5 handshake failed: {{.Arg1}}"
|
||||
socks5_request_failed:
|
||||
other: "SOCKS5 request handling failed: {{.Arg1}}"
|
||||
socks5_connected:
|
||||
other: "SOCKS5 proxy connection established"
|
||||
|
||||
# Reverse shell
|
||||
reverseshell_complete:
|
||||
other: "Reverse shell completed - target: {{.Arg1}}"
|
||||
reverseshell_connected:
|
||||
other: "Reverse shell connected to {{.Arg1}}:{{.Arg2}}"
|
||||
|
||||
# Systemd service
|
||||
systemdservice_success:
|
||||
other: "Systemd service persistence completed: {{.Arg1}} methods succeeded"
|
||||
|
||||
# System info
|
||||
systeminfo_start:
|
||||
other: "Starting system information collection"
|
||||
systeminfo_os:
|
||||
other: "Operating System: {{.Arg1}}"
|
||||
systeminfo_arch:
|
||||
other: "Architecture: {{.Arg1}}"
|
||||
systeminfo_cpu:
|
||||
other: "CPU Cores: {{.Arg1}}"
|
||||
systeminfo_hostname:
|
||||
other: "Hostname: {{.Arg1}}"
|
||||
systeminfo_user:
|
||||
other: "Current User: {{.Arg1}}"
|
||||
systeminfo_homedir:
|
||||
other: "Home Directory: {{.Arg1}}"
|
||||
systeminfo_workdir:
|
||||
other: "Working Directory: {{.Arg1}}"
|
||||
systeminfo_tempdir:
|
||||
other: "Temp Directory: {{.Arg1}}"
|
||||
systeminfo_pathcount:
|
||||
other: "PATH entries: {{.Arg1}}"
|
||||
systeminfo_winver:
|
||||
other: "Windows Version: {{.Arg1}}"
|
||||
systeminfo_domain:
|
||||
other: "User Domain: {{.Arg1}}"
|
||||
systeminfo_kernel:
|
||||
other: "System Kernel: {{.Arg1}}"
|
||||
systeminfo_distro:
|
||||
other: "Distribution: {{.Arg1}}"
|
||||
systeminfo_distro_exists:
|
||||
other: "Distribution: /etc/os-release exists"
|
||||
systeminfo_whoami:
|
||||
other: "Current User (whoami): {{.Arg1}}"
|
||||
|
||||
# Windows scheduled task
|
||||
winschtask_success:
|
||||
other: "Windows scheduled task persistence completed: {{.Arg1}} items"
|
||||
|
||||
# Windows registry
|
||||
winregistry_success:
|
||||
other: "Windows registry persistence completed: {{.Arg1}} items"
|
||||
|
||||
# Minidump
|
||||
minidump_panic:
|
||||
other: "Minidump plugin panic: {{.Arg1}}"
|
||||
minidump_success:
|
||||
other: "Successfully dumped lsass.exe memory to file: {{.Arg1}} (size: {{.Arg2}} bytes)"
|
||||
|
||||
# ========================= WebScan Messages =========================
|
||||
webscan_target_url_failed:
|
||||
other: "Failed to build target URL: {{.Arg1}}"
|
||||
webscan_invalid_url:
|
||||
other: "{{.Arg1}} {{.Arg2}}: {{.Arg3}}"
|
||||
webscan_request_create_failed:
|
||||
other: "Failed to create HTTP request: {{.Arg1}}"
|
||||
webscan_builtin_poc_failed:
|
||||
other: "Failed to load builtin POC directory: {{.Arg1}}"
|
||||
webscan_poc_dir_not_exist:
|
||||
other: "POC directory does not exist: {{.Arg1}}"
|
||||
webscan_poc_dir_walk_failed:
|
||||
other: "Failed to traverse POC directory: {{.Arg1}}"
|
||||
webscan_rule_match_error:
|
||||
other: "Rule match error [{{.Arg1}}]: {{.Arg2}}"
|
||||
webscan_poc_exec_error:
|
||||
other: "POC execution error {{.Arg1}}: {{.Arg2}}"
|
||||
webscan_set_exec_error:
|
||||
other: "Set execution error {{.Arg1}}: {{.Arg2}}"
|
||||
webscan_regex_compile_error:
|
||||
other: "Regex compile error: {{.Arg1}}"
|
||||
webscan_reverse_url_error:
|
||||
other: "Reverse URL parse error: {{.Arg1}}"
|
||||
webscan_cel_syntax_error:
|
||||
other: "CEL syntax error [{{.Arg1}}]: {{.Arg2}}"
|
||||
webscan_cel_init_failed:
|
||||
other: "Failed to initialize base CEL environment: {{.Arg1}}"
|
||||
webscan_request_restricted:
|
||||
other: "POC HTTP request {{.Arg1}} restricted: {{.Arg2}}"
|
||||
webscan_response_parse_failed:
|
||||
other: "Response parse failed: {{.Arg1}}"
|
||||
|
||||
# Main entry
|
||||
param_error:
|
||||
other: "Parameter error: {{.Arg1}}"
|
||||
error_generic:
|
||||
other: "Error: {{.Arg1}}"
|
||||
init_failed:
|
||||
other: "Initialization failed: {{.Arg1}}"
|
||||
poc_load_complete:
|
||||
other: "POC loading complete: Total {{.Arg1}}, Success {{.Arg2}}, Failed {{.Arg3}}"
|
||||
redis_scan_success:
|
||||
other: "Redis {{.Arg1}} {{.Arg2}}"
|
||||
rabbitmq_detected:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}"
|
||||
|
||||
# ========================= Web UI Messages =========================
|
||||
web_server_started:
|
||||
other: "Web server started on port: {{.Arg1}}"
|
||||
web_shutting_down:
|
||||
other: "Web server shutting down..."
|
||||
web_mode_not_supported:
|
||||
other: "Web mode not supported in this build, rebuild with: go build -tags web"
|
||||
@@ -0,0 +1,755 @@
|
||||
# fscan 中文翻译文件
|
||||
# 仅包含实际使用的消息(115个)
|
||||
|
||||
# ========================= 命令行参数 (71个) =========================
|
||||
flag_host:
|
||||
other: "目标主机: IP, IP段, IP段文件, 域名"
|
||||
flag_exclude_hosts:
|
||||
other: "排除主机"
|
||||
flag_exclude_hosts_file:
|
||||
other: "排除主机文件"
|
||||
flag_ports:
|
||||
other: "端口: 默认1000个常用端口"
|
||||
flag_exclude_ports:
|
||||
other: "排除端口"
|
||||
flag_hosts_file:
|
||||
other: "主机文件"
|
||||
flag_ports_file:
|
||||
other: "端口文件"
|
||||
flag_scan_mode:
|
||||
other: "扫描模式: all(全部), icmp(存活探测), 或指定插件名称"
|
||||
flag_thread_num:
|
||||
other: "端口扫描线程数"
|
||||
flag_timeout:
|
||||
other: "端口扫描超时时间"
|
||||
flag_module_thread_num:
|
||||
other: "模块线程数"
|
||||
flag_global_timeout:
|
||||
other: "全局超时时间"
|
||||
flag_disable_ping:
|
||||
other: "禁用ping探测"
|
||||
flag_alive_only:
|
||||
other: "仅进行存活探测"
|
||||
flag_username:
|
||||
other: "用户名"
|
||||
flag_password:
|
||||
other: "密码"
|
||||
flag_add_users:
|
||||
other: "额外用户名"
|
||||
flag_add_passwords:
|
||||
other: "额外密码"
|
||||
flag_users_file:
|
||||
other: "用户名字典文件"
|
||||
flag_passwords_file:
|
||||
other: "密码字典文件"
|
||||
flag_userpass_file:
|
||||
other: "用户名:密码对文件"
|
||||
flag_hash_file:
|
||||
other: "哈希文件"
|
||||
flag_hash_value:
|
||||
other: "哈希值"
|
||||
flag_domain:
|
||||
other: "域名"
|
||||
flag_ssh_key:
|
||||
other: "SSH私钥文件"
|
||||
flag_target_url:
|
||||
other: "目标URL"
|
||||
flag_urls_file:
|
||||
other: "URL文件"
|
||||
flag_cookie:
|
||||
other: "HTTP Cookie"
|
||||
flag_web_timeout:
|
||||
other: "Web超时时间"
|
||||
flag_max_redirects:
|
||||
other: "HTTP最大重定向次数"
|
||||
flag_http_proxy:
|
||||
other: "HTTP代理"
|
||||
flag_socks5_proxy:
|
||||
other: "使用SOCKS5代理 (如: 127.0.0.1:1080)"
|
||||
flag_iface:
|
||||
other: "指定本地网卡IP地址 (VPN场景,如: 10.8.0.5)"
|
||||
flag_poc_path:
|
||||
other: "POC脚本路径"
|
||||
flag_poc_name:
|
||||
other: "POC名称"
|
||||
flag_poc_full:
|
||||
other: "全量POC扫描"
|
||||
flag_dns_log:
|
||||
other: "DNS日志记录"
|
||||
flag_poc_num:
|
||||
other: "POC并发数"
|
||||
flag_no_poc:
|
||||
other: "禁用POC扫描"
|
||||
flag_redis_file:
|
||||
other: "Redis文件"
|
||||
flag_redis_shell:
|
||||
other: "Redis Shell"
|
||||
flag_redis_write_path:
|
||||
other: "Redis写入路径"
|
||||
flag_redis_write_content:
|
||||
other: "Redis写入内容"
|
||||
flag_redis_write_file:
|
||||
other: "Redis写入文件"
|
||||
flag_disable_redis:
|
||||
other: "禁用Redis利用"
|
||||
flag_disable_brute:
|
||||
other: "禁用暴力破解"
|
||||
flag_max_retries:
|
||||
other: "最大重试次数"
|
||||
flag_packet_rate_limit:
|
||||
other: "每分钟最大发包次数 (0表示不限制)"
|
||||
flag_max_packet_count:
|
||||
other: "整个程序最大发包总数 (0表示不限制)"
|
||||
flag_icmp_rate:
|
||||
other: "ICMP发包速率 (相对于最大速率的比例,默认0.1,约1463 pps)"
|
||||
flag_output_file:
|
||||
other: "输出文件"
|
||||
flag_output_format:
|
||||
other: "输出格式: txt, json, csv"
|
||||
flag_disable_save:
|
||||
other: "禁用结果保存"
|
||||
flag_silent_mode:
|
||||
other: "静默模式"
|
||||
flag_no_color:
|
||||
other: "禁用颜色输出"
|
||||
flag_log_level:
|
||||
other: "日志级别"
|
||||
flag_disable_progress:
|
||||
other: "禁用进度条"
|
||||
flag_shellcode:
|
||||
other: "Shellcode"
|
||||
flag_reverse_shell_target:
|
||||
other: "反弹Shell目标地址:端口 (如: 192.168.1.100:4444)"
|
||||
flag_start_socks5_server:
|
||||
other: "启动SOCKS5代理服务器端口 (如: 1080)"
|
||||
flag_forward_shell_port:
|
||||
other: "启动正向Shell服务器端口 (如: 4444)"
|
||||
flag_persistence_file:
|
||||
other: "Linux持久化目标文件路径 (支持.elf/.sh文件)"
|
||||
flag_win_pe_file:
|
||||
other: "Windows持久化目标PE文件路径 (支持.exe/.dll文件)"
|
||||
flag_keylogger_output:
|
||||
other: "键盘记录输出文件路径"
|
||||
flag_download_url:
|
||||
other: "要下载的文件URL"
|
||||
flag_download_path:
|
||||
other: "下载文件保存路径"
|
||||
flag_language:
|
||||
other: "语言: zh, en"
|
||||
flag_help:
|
||||
other: "显示帮助信息"
|
||||
# ========================= 扫描模式消息 =========================
|
||||
scan_mode_service_selected:
|
||||
other: "已选择服务扫描模式"
|
||||
scan_mode_alive_selected:
|
||||
other: "已选择存活探测模式"
|
||||
scan_mode_local_selected:
|
||||
other: "已选择本地扫描模式"
|
||||
scan_mode_web_selected:
|
||||
other: "已选择Web扫描模式"
|
||||
scan_info_start:
|
||||
other: "开始信息扫描"
|
||||
scan_host_start:
|
||||
other: "开始主机扫描"
|
||||
scan_vulnerability_start:
|
||||
other: "开始漏洞扫描"
|
||||
scan_no_service_plugins:
|
||||
other: "未找到可用的服务插件"
|
||||
|
||||
# ========================= 扫描策略消息 =========================
|
||||
scan_strategy_alive_name:
|
||||
other: "存活探测"
|
||||
scan_strategy_alive_desc:
|
||||
other: "快速探测主机存活状态"
|
||||
scan_strategy_local_name:
|
||||
other: "本地扫描"
|
||||
scan_strategy_local_desc:
|
||||
other: "收集本地系统信息"
|
||||
scan_strategy_service_name:
|
||||
other: "服务扫描"
|
||||
scan_strategy_service_desc:
|
||||
other: "扫描主机服务和漏洞"
|
||||
scan_strategy_web_name:
|
||||
other: "Web扫描"
|
||||
scan_strategy_web_desc:
|
||||
other: "扫描Web应用漏洞和信息"
|
||||
|
||||
# ========================= 存活探测消息 =========================
|
||||
scan_alive_start:
|
||||
other: "开始存活探测"
|
||||
scan_alive_summary_title:
|
||||
other: "存活探测结果摘要"
|
||||
scan_alive_hosts_list:
|
||||
other: "存活主机列表:"
|
||||
|
||||
# ========================= 进度消息 =========================
|
||||
progress_scanning_description:
|
||||
other: "扫描进度"
|
||||
progress_scan_completed:
|
||||
other: "扫描完成:"
|
||||
concurrency_plugin:
|
||||
other: "插件"
|
||||
concurrency_local_plugin:
|
||||
other: "本地插件"
|
||||
concurrency_service_plugin:
|
||||
other: "服务插件"
|
||||
concurrency_web_plugin:
|
||||
other: "Web插件"
|
||||
|
||||
# ========================= 解析错误消息 =========================
|
||||
parse_error_target_empty:
|
||||
other: "目标输入为空"
|
||||
parse_error_no_hosts:
|
||||
other: "解析后没有找到有效的目标主机"
|
||||
parse_error_empty_input:
|
||||
other: "输入参数为空"
|
||||
parse_error_parser_not_init:
|
||||
other: "解析器未初始化"
|
||||
target_local_mode:
|
||||
other: "本地扫描模式"
|
||||
param_conflict_ao_icmp_both:
|
||||
other: "提示: 同时指定了 -ao 和 -m icmp,两者功能相同,使用存活探测模式"
|
||||
|
||||
# ========================= 解析器消息 =========================
|
||||
parser_empty_input:
|
||||
other: "输入参数为空"
|
||||
parser_file_scan_failed:
|
||||
other: "文件扫描失败"
|
||||
parser_username_invalid_chars:
|
||||
other: "用户名包含非法字符"
|
||||
parser_password_empty:
|
||||
other: "不允许空密码"
|
||||
parser_hash_empty:
|
||||
other: "哈希值为空"
|
||||
parser_hash_invalid_format:
|
||||
other: "哈希值格式无效,需要32位十六进制字符"
|
||||
|
||||
# ========================= 配置消息 =========================
|
||||
config_web_timeout_warning:
|
||||
other: "Web超时时间大于普通超时时间,可能导致不期望的行为"
|
||||
|
||||
# ========================= 插件扫描消息 (带参数) =========================
|
||||
scan_plugin_not_found:
|
||||
other: "扫描类型 {{.Arg1}} 无对应插件,已跳过"
|
||||
|
||||
# ========================= SSH插件消息 =========================
|
||||
ssh_key_auth_success:
|
||||
other: "SSH密钥认证成功: {{.Arg1}} [{{.Arg2}}]"
|
||||
ssh_pwd_auth_success:
|
||||
other: "SSH密码认证成功: {{.Arg1}} [{{.Arg2}}:{{.Arg3}}]"
|
||||
ssh_key_read_failed:
|
||||
other: "读取SSH私钥失败: {{.Arg1}}"
|
||||
ssh_service_identified:
|
||||
other: "SSH服务识别成功: {{.Arg1}} - {{.Arg2}}"
|
||||
|
||||
# ========================= Redis插件消息 =========================
|
||||
redis_unauth_success:
|
||||
other: "Redis未授权访问: {{.Arg1}}"
|
||||
redis_service_identified:
|
||||
other: "Redis服务识别成功: {{.Arg1}} - {{.Arg2}}"
|
||||
|
||||
# ========================= ICMP相关消息 =========================
|
||||
trying_no_listen_icmp:
|
||||
other: "尝试无监听ICMP探测"
|
||||
insufficient_privileges:
|
||||
other: "权限不足,无法执行原始ICMP探测"
|
||||
switching_to_ping:
|
||||
other: "切换到ping命令模式"
|
||||
icmp_listen_failed:
|
||||
other: "ICMP监听失败: {{.Arg1}}"
|
||||
icmp_connect_failed:
|
||||
other: "ICMP连接失败: {{.Arg1}}"
|
||||
icmp_listener_panic:
|
||||
other: "ICMP监听协程异常: {{.Arg1}}"
|
||||
host_alive:
|
||||
other: "{{.Arg1}} 存活 (协议: {{.Arg2}})"
|
||||
proxy_mode_disable_icmp:
|
||||
other: "检测到代理模式,自动禁用ICMP扫描"
|
||||
segment_16_alive:
|
||||
other: "{{.Arg1}}.0.0/16 网段存活: {{.Arg2}}"
|
||||
segment_24_alive:
|
||||
other: "{{.Arg1}}.0/24 网段存活: {{.Arg2}}"
|
||||
tcp_probe_low_icmp_rate:
|
||||
other: "ICMP响应率过低({{.Arg1}}),启用TCP补充探测({{.Arg2}}个主机)"
|
||||
tcp_probe_found:
|
||||
other: "TCP补充探测发现 {{.Arg1}} 个存活主机"
|
||||
|
||||
# ========================= 存活扫描统计消息 =========================
|
||||
parse_target_failed:
|
||||
other: "解析目标失败: {{.Arg1}}"
|
||||
alive_scan_start_single:
|
||||
other: "开始存活扫描: {{.Arg1}}"
|
||||
alive_scan_start_multi:
|
||||
other: "开始存活扫描: {{.Arg1}}个目标 (首个: {{.Arg2}})"
|
||||
alive_total_hosts:
|
||||
other: "总主机数: {{.Arg1}}"
|
||||
alive_hosts_count:
|
||||
other: "存活主机: {{.Arg1}}"
|
||||
alive_dead_hosts:
|
||||
other: "死亡主机: {{.Arg1}}"
|
||||
alive_success_rate:
|
||||
other: "成功率: {{.Arg1}}"
|
||||
alive_scan_duration:
|
||||
other: "扫描耗时: {{.Arg1}}"
|
||||
alive_host_item:
|
||||
other: " [{{.Arg1}}] {{.Arg2}}"
|
||||
|
||||
# ========================= 扫描器消息 =========================
|
||||
http_client_init_failed:
|
||||
other: "HTTP客户端初始化失败: {{.Arg1}}"
|
||||
active_reverse_shell:
|
||||
other: "检测到活跃的反弹Shell,保持程序运行..."
|
||||
active_socks5_proxy:
|
||||
other: "检测到活跃的SOCKS5代理,保持程序运行..."
|
||||
active_forward_shell:
|
||||
other: "检测到活跃的正向Shell,保持程序运行..."
|
||||
press_ctrl_c_exit:
|
||||
other: "按 Ctrl+C 退出程序"
|
||||
received_exit_signal:
|
||||
other: "收到退出信号,正在关闭..."
|
||||
scan_task_complete:
|
||||
other: "扫描任务完成,耗时 {{.Arg1}},已扫描 {{.Arg2}} 个目标"
|
||||
plugin_panic:
|
||||
other: "插件 {{.Arg1}} 扫描 {{.Arg2}}:{{.Arg3}} 时panic: {{.Arg4}}"
|
||||
plugin_scan_error:
|
||||
other: "插件扫描错误 {{.Arg1}}:{{.Arg2}} - {{.Arg3}}"
|
||||
brute_no_weak_pass:
|
||||
other: "{{.Arg1}}:{{.Arg2}} {{.Arg3}} 未发现弱密码"
|
||||
|
||||
# ========================= 端口扫描消息 =========================
|
||||
invalid_port:
|
||||
other: "无效端口: {{.Arg1}}"
|
||||
port_scan_start:
|
||||
other: "开始端口扫描,共 {{.Arg1}} 个任务,预计耗时 {{.Arg2}} 秒({{.Arg3}} 分钟)"
|
||||
thread_pool_create_failed:
|
||||
other: "创建线程池失败: {{.Arg1}}"
|
||||
port_scan_complete:
|
||||
other: "扫描完成,发现 {{.Arg1}} 个开放端口"
|
||||
scan_failure_rate_high:
|
||||
other: "扫描失败率过高: {{.Arg1}} ({{.Arg2}}/{{.Arg3}}失败)"
|
||||
scan_failure_reason:
|
||||
other: "可能原因: 线程数过高导致资源耗尽"
|
||||
scan_reduce_threads_suggestion:
|
||||
other: "建议: 降低线程数(当前{{.Arg1}})到50-100,或增加系统ulimit"
|
||||
scan_partial_failure:
|
||||
other: "部分端口扫描失败: {{.Arg1}} ({{.Arg2}}/{{.Arg3}})"
|
||||
scan_reduce_threads_accuracy:
|
||||
other: "建议: 降低线程数(当前{{.Arg1}})以提高准确性"
|
||||
resource_exhausted_warning:
|
||||
other: "资源耗尽错误 {{.Arg1}} 次,建议降低线程数(-t)或增加ulimit"
|
||||
port_open:
|
||||
other: "端口开放 {{.Arg1}}"
|
||||
port_open_http:
|
||||
other: "端口开放 {{.Arg1}} [http](HTTP探测)"
|
||||
|
||||
# ========================= 本地扫描消息 =========================
|
||||
local_plugin_info:
|
||||
other: "本地插件: {{.Arg1}}"
|
||||
local_plugin_not_specified:
|
||||
other: "本地插件: 未指定"
|
||||
local_plugin_not_found:
|
||||
other: "错误: 本地插件 '{{.Arg1}}' 不存在或在当前平台不可用"
|
||||
|
||||
# ========================= 服务扫描消息 =========================
|
||||
service_plugin_info:
|
||||
other: "服务插件: {{.Arg1}}"
|
||||
service_plugin_custom:
|
||||
other: "服务插件: 自定义指定 ({{.Arg1}})"
|
||||
service_plugin_none:
|
||||
other: "服务插件: 无可用插件"
|
||||
port_out_of_range:
|
||||
other: "端口超出范围: {{.Arg1}} (有效范围: 1-65535)"
|
||||
invalid_target_format:
|
||||
other: "无效的目标格式: {{.Arg1}}"
|
||||
host_port_invalid:
|
||||
other: "主机 {{.Arg1}} 端口格式非法: {{.Arg2}}"
|
||||
host_port_out_of_range:
|
||||
other: "主机 {{.Arg1}} 端口超出范围: {{.Arg2}} (有效范围: 1-65535)"
|
||||
alive_hosts_count_info:
|
||||
other: "存活主机数: {{.Arg1}}"
|
||||
alive_ports_count:
|
||||
other: "存活端口数: {{.Arg1}}"
|
||||
|
||||
# ========================= Web扫描消息 =========================
|
||||
http_proxy_config_error:
|
||||
other: "HTTP代理配置错误: {{.Arg1}}"
|
||||
socks5_not_supported_web:
|
||||
other: "Web检测暂不支持SOCKS5代理,建议使用HTTP代理(-proxy)"
|
||||
url_parse_failed:
|
||||
other: "解析URL失败: {{.Arg1}} - {{.Arg2}}"
|
||||
invalid_scan_target:
|
||||
other: "无效的扫描目标"
|
||||
poc_load_failed:
|
||||
other: "POC加载失败,无法执行扫描"
|
||||
|
||||
# ========================= 基础扫描策略消息 =========================
|
||||
plugins_custom_specified:
|
||||
other: "{{.Arg1}}: 自定义指定 ({{.Arg2}})"
|
||||
plugins_info:
|
||||
other: "{{.Arg1}}: {{.Arg2}}"
|
||||
plugins_none:
|
||||
other: "{{.Arg1}}: 无可用插件"
|
||||
start_local_scan:
|
||||
other: "开始本地扫描"
|
||||
start_service_scan:
|
||||
other: "开始服务扫描"
|
||||
start_web_scan:
|
||||
other: "开始Web扫描"
|
||||
start_scan:
|
||||
other: "开始扫描"
|
||||
|
||||
# ========================= 服务插件通用消息 =========================
|
||||
# 格式: {service}_{type} - type: credential/unauth/service/vuln
|
||||
ldap_credential:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
ldap_hash_credential:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}\\{{.Arg3}} [Hash:{{.Arg4}}]"
|
||||
ldap_service:
|
||||
other: "LDAP {{.Arg1}} {{.Arg2}}"
|
||||
kafka_credential:
|
||||
other: "Kafka {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
kafka_service:
|
||||
other: "Kafka {{.Arg1}} {{.Arg2}}"
|
||||
ftp_service:
|
||||
other: "FTP {{.Arg1}} {{.Arg2}}"
|
||||
rdp_service:
|
||||
other: "RDP {{.Arg1}} {{.Arg2}}"
|
||||
activemq_credential:
|
||||
other: "ActiveMQ {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
activemq_service:
|
||||
other: "ActiveMQ {{.Arg1}} {{.Arg2}}"
|
||||
telnet_credential:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
telnet_service:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}"
|
||||
telnet_unauth_rce:
|
||||
other: "Telnet {{.Arg1}} 未授权访问且可执行命令 [{{.Arg2}}] {{.Arg3}}"
|
||||
telnet_credential_rce:
|
||||
other: "Telnet {{.Arg1}} {{.Arg2}}:{{.Arg3}} 命令执行验证成功 [{{.Arg4}}] {{.Arg5}}"
|
||||
cassandra_credential:
|
||||
other: "Cassandra {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
cassandra_service:
|
||||
other: "Cassandra {{.Arg1}} {{.Arg2}}"
|
||||
cassandra_unauth:
|
||||
other: "Cassandra {{.Arg1}} 无需认证"
|
||||
vnc_unauth:
|
||||
other: "VNC {{.Arg1}} 未授权访问"
|
||||
vnc_credential:
|
||||
other: "VNC {{.Arg1}} 密码: {{.Arg2}}"
|
||||
smtp_credential:
|
||||
other: "SMTP {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
smtp_service:
|
||||
other: "SMTP {{.Arg1}} {{.Arg2}}"
|
||||
mongodb_unauth:
|
||||
other: "MongoDB {{.Arg1}} 未授权访问"
|
||||
mongodb_credential:
|
||||
other: "MongoDB {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mongodb_auth_required:
|
||||
other: "MongoDB {{.Arg1}} 需要认证"
|
||||
elasticsearch_credential:
|
||||
other: "Elasticsearch {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
elasticsearch_unauth:
|
||||
other: "Elasticsearch {{.Arg1}} 未授权访问"
|
||||
elasticsearch_service:
|
||||
other: "Elasticsearch {{.Arg1}} {{.Arg2}}"
|
||||
mysql_credential:
|
||||
other: "MySQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mysql_service:
|
||||
other: "MySQL {{.Arg1}} {{.Arg2}}"
|
||||
memcached_unauth:
|
||||
other: "Memcached {{.Arg1}} 未授权访问"
|
||||
memcached_service:
|
||||
other: "Memcached {{.Arg1}} {{.Arg2}}"
|
||||
rsync_credential:
|
||||
other: "Rsync {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
rsync_service:
|
||||
other: "Rsync {{.Arg1}} {{.Arg2}}"
|
||||
oracle_credential:
|
||||
other: "Oracle {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
oracle_service:
|
||||
other: "Oracle {{.Arg1}} {{.Arg2}}"
|
||||
oracle_default_account:
|
||||
other: "Oracle {{.Arg1}} 默认账户: {{.Arg2}}:{{.Arg3}}"
|
||||
postgresql_credential:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
postgresql_service:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}"
|
||||
postgresql_vuln:
|
||||
other: "PostgreSQL {{.Arg1}} {{.Arg2}}"
|
||||
smb_service:
|
||||
other: "SMB {{.Arg1}} {{.Arg2}}"
|
||||
rabbitmq_credential:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
rabbitmq_service:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}"
|
||||
neo4j_unauth:
|
||||
other: "Neo4j {{.Arg1}} 未授权访问"
|
||||
neo4j_credential:
|
||||
other: "Neo4j {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
neo4j_service:
|
||||
other: "Neo4j {{.Arg1}} {{.Arg2}}"
|
||||
mssql_credential:
|
||||
other: "MSSQL {{.Arg1}} {{.Arg2}}:{{.Arg3}}"
|
||||
mssql_service:
|
||||
other: "MSSQL {{.Arg1}} {{.Arg2}}"
|
||||
|
||||
# ========================= 漏洞检测消息 =========================
|
||||
smbghost_vuln:
|
||||
other: "SMB Ghost {{.Arg1}} CVE-2020-0796 漏洞存在"
|
||||
ms17010_start:
|
||||
other: "MS17-010利用开始: {{.Arg1}}"
|
||||
ms17010_complete:
|
||||
other: "MS17-010利用完成: {{.Arg1}}"
|
||||
ms17010_shellcode_complete:
|
||||
other: "{{.Arg1}} MS17-010漏洞利用完成 (Shellcode长度: {{.Arg2}})"
|
||||
ms17010_protocol_decrypt_error:
|
||||
other: "协议请求解密错误: {{.Arg1}}"
|
||||
ms17010_protocol_decode_error:
|
||||
other: "协议请求解码错误: {{.Arg1}}"
|
||||
ms17010_session_decrypt_error:
|
||||
other: "会话请求解密错误: {{.Arg1}}"
|
||||
ms17010_session_decode_error:
|
||||
other: "会话请求解码错误: {{.Arg1}}"
|
||||
ms17010_connect_decrypt_error:
|
||||
other: "连接请求解密错误: {{.Arg1}}"
|
||||
ms17010_connect_decode_error:
|
||||
other: "连接请求解码错误: {{.Arg1}}"
|
||||
ms17010_pipe_decrypt_error:
|
||||
other: "管道请求解密错误: {{.Arg1}}"
|
||||
ms17010_pipe_decode_error:
|
||||
other: "管道请求解码错误: {{.Arg1}}"
|
||||
|
||||
# ========================= Redis插件消息 =========================
|
||||
redis_reconnect_failed:
|
||||
other: "重新连接Redis失败: {{.Arg1}}"
|
||||
redis_config_failed:
|
||||
other: "获取Redis配置失败: {{.Arg1}}"
|
||||
redis_write_failed:
|
||||
other: "文件写入失败: {{.Arg1}}"
|
||||
redis_write_success:
|
||||
other: "成功写入文件: {{.Arg1}}"
|
||||
redis_read_failed:
|
||||
other: "读取本地文件失败: {{.Arg1}}"
|
||||
redis_file_write_success:
|
||||
other: "成功将文件 {{.Arg1}} 的内容写入到 {{.Arg2}}"
|
||||
redis_ssh_key_failed:
|
||||
other: "SSH密钥写入失败: {{.Arg1}}"
|
||||
redis_ssh_key_success:
|
||||
other: "SSH密钥写入成功"
|
||||
redis_cron_failed:
|
||||
other: "定时任务写入失败: {{.Arg1}}"
|
||||
redis_cron_success:
|
||||
other: "定时任务写入成功"
|
||||
redis_restore_failed:
|
||||
other: "恢复数据库配置失败: {{.Arg1}}"
|
||||
|
||||
# ========================= 本地插件消息 =========================
|
||||
# 计划任务持久化
|
||||
crontask_success:
|
||||
other: "计划任务持久化完成: {{.Arg1}}个方法成功"
|
||||
|
||||
# 键盘记录
|
||||
keylogger_success:
|
||||
other: "键盘记录完成,捕获了 {{.Arg1}} 个键盘事件"
|
||||
keylogger_save_failed:
|
||||
other: "保存键盘记录失败: {{.Arg1}}"
|
||||
keylogger_no_input:
|
||||
other: "没有捕获到键盘输入"
|
||||
|
||||
# 环境变量信息
|
||||
envinfo_sensitive:
|
||||
other: "发现敏感环境变量: {{.Arg1}}"
|
||||
|
||||
# Windows WMI
|
||||
winwmi_success:
|
||||
other: "Windows WMI事件订阅持久化完成: {{.Arg1}}个项目"
|
||||
|
||||
# 痕迹清理
|
||||
cleaner_success:
|
||||
other: "痕迹清理完成: {{.Arg1}}个文件, {{.Arg2}}个系统条目"
|
||||
cleaner_history_found:
|
||||
other: "发现历史文件: {{.Arg1}} (需手动清理相关条目)"
|
||||
|
||||
# 文件下载
|
||||
downloader_success:
|
||||
other: "文件下载完成: {{.Arg1}} -> {{.Arg2}} (大小: {{.Arg3}} bytes)"
|
||||
|
||||
# 正向Shell
|
||||
forwardshell_complete:
|
||||
other: "正向Shell服务完成 - 端口: {{.Arg1}}"
|
||||
forwardshell_started:
|
||||
other: "正向Shell服务器已在 0.0.0.0:{{.Arg1}} 上启动"
|
||||
forwardshell_accept_failed:
|
||||
other: "接受连接失败: {{.Arg1}}"
|
||||
forwardshell_client_connected:
|
||||
other: "客户端连接来自: {{.Arg1}}"
|
||||
forwardshell_read_failed:
|
||||
other: "读取客户端命令失败: {{.Arg1}}"
|
||||
|
||||
# AV检测
|
||||
avdetect_load_failed:
|
||||
other: "加载AV数据库失败: {{.Arg1}}"
|
||||
avdetect_loaded:
|
||||
other: "加载了 {{.Arg1}} 个AV产品信息"
|
||||
avdetect_found:
|
||||
other: "检测到AV: {{.Arg1}} ({{.Arg2}}个进程)"
|
||||
avdetect_process:
|
||||
other: " - {{.Arg1}}"
|
||||
|
||||
# Windows启动文件夹
|
||||
winstartup_success:
|
||||
other: "Windows启动文件夹持久化完成: {{.Arg1}}个方法"
|
||||
|
||||
# 文件信息
|
||||
fileinfo_sensitive:
|
||||
other: "发现敏感文件: {{.Arg1}}"
|
||||
fileinfo_potential:
|
||||
other: "发现潜在敏感文件: {{.Arg1}}"
|
||||
|
||||
# 域控信息
|
||||
dcinfo_not_joined:
|
||||
other: "当前计算机未加入域环境"
|
||||
dcinfo_success:
|
||||
other: "域控制器信息收集完成: {{.Arg1}}个类别成功"
|
||||
|
||||
# Windows服务
|
||||
winservice_success:
|
||||
other: "Windows服务持久化完成: {{.Arg1}}个项目"
|
||||
|
||||
# Shell环境变量
|
||||
shellenv_success:
|
||||
other: "Shell环境变量持久化完成: {{.Arg1}}个方法成功"
|
||||
|
||||
# LD_PRELOAD
|
||||
ldpreload_success:
|
||||
other: "LD_PRELOAD持久化完成: {{.Arg1}}个方法成功"
|
||||
|
||||
# SOCKS5代理
|
||||
socks5_starting:
|
||||
other: "在端口 {{.Arg1}} 上启动SOCKS5代理"
|
||||
socks5_complete:
|
||||
other: "SOCKS5代理完成 - 端口: {{.Arg1}}"
|
||||
socks5_started:
|
||||
other: "SOCKS5代理服务器已在 127.0.0.1:{{.Arg1}} 上启动"
|
||||
socks5_cancelled:
|
||||
other: "SOCKS5代理服务器被上下文取消"
|
||||
socks5_accept_failed:
|
||||
other: "接受连接失败: {{.Arg1}}"
|
||||
socks5_handshake_failed:
|
||||
other: "SOCKS5握手失败: {{.Arg1}}"
|
||||
socks5_request_failed:
|
||||
other: "SOCKS5请求处理失败: {{.Arg1}}"
|
||||
socks5_connected:
|
||||
other: "建立SOCKS5代理连接"
|
||||
|
||||
# 反弹Shell
|
||||
reverseshell_complete:
|
||||
other: "反弹Shell完成 - 目标: {{.Arg1}}"
|
||||
reverseshell_connected:
|
||||
other: "反弹Shell已连接到 {{.Arg1}}:{{.Arg2}}"
|
||||
|
||||
# Systemd服务
|
||||
systemdservice_success:
|
||||
other: "系统服务持久化完成: {{.Arg1}}个方法成功"
|
||||
|
||||
# 系统信息
|
||||
systeminfo_start:
|
||||
other: "开始系统信息收集"
|
||||
systeminfo_os:
|
||||
other: "操作系统: {{.Arg1}}"
|
||||
systeminfo_arch:
|
||||
other: "架构: {{.Arg1}}"
|
||||
systeminfo_cpu:
|
||||
other: "CPU核心数: {{.Arg1}}"
|
||||
systeminfo_hostname:
|
||||
other: "主机名: {{.Arg1}}"
|
||||
systeminfo_user:
|
||||
other: "当前用户: {{.Arg1}}"
|
||||
systeminfo_homedir:
|
||||
other: "用户目录: {{.Arg1}}"
|
||||
systeminfo_workdir:
|
||||
other: "工作目录: {{.Arg1}}"
|
||||
systeminfo_tempdir:
|
||||
other: "临时目录: {{.Arg1}}"
|
||||
systeminfo_pathcount:
|
||||
other: "PATH变量条目: {{.Arg1}}个"
|
||||
systeminfo_winver:
|
||||
other: "Windows版本: {{.Arg1}}"
|
||||
systeminfo_domain:
|
||||
other: "用户域: {{.Arg1}}"
|
||||
systeminfo_kernel:
|
||||
other: "系统内核: {{.Arg1}}"
|
||||
systeminfo_distro:
|
||||
other: "发行版: {{.Arg1}}"
|
||||
systeminfo_distro_exists:
|
||||
other: "发行版: /etc/os-release 存在"
|
||||
systeminfo_whoami:
|
||||
other: "当前用户(whoami): {{.Arg1}}"
|
||||
|
||||
# Windows计划任务
|
||||
winschtask_success:
|
||||
other: "Windows计划任务持久化完成: {{.Arg1}}个项目"
|
||||
|
||||
# Windows注册表
|
||||
winregistry_success:
|
||||
other: "Windows注册表持久化完成: {{.Arg1}}个项目"
|
||||
|
||||
# Minidump
|
||||
minidump_panic:
|
||||
other: "minidump插件发生panic: {{.Arg1}}"
|
||||
minidump_success:
|
||||
other: "成功将lsass.exe内存转储到文件: {{.Arg1}} (大小: {{.Arg2}} bytes)"
|
||||
|
||||
# ========================= WebScan消息 =========================
|
||||
webscan_target_url_failed:
|
||||
other: "构建目标URL失败: {{.Arg1}}"
|
||||
webscan_invalid_url:
|
||||
other: "{{.Arg1}} {{.Arg2}}: {{.Arg3}}"
|
||||
webscan_request_create_failed:
|
||||
other: "创建HTTP请求失败: {{.Arg1}}"
|
||||
webscan_builtin_poc_failed:
|
||||
other: "加载内置POC目录失败: {{.Arg1}}"
|
||||
webscan_poc_dir_not_exist:
|
||||
other: "POC目录不存在: {{.Arg1}}"
|
||||
webscan_poc_dir_walk_failed:
|
||||
other: "遍历POC目录失败: {{.Arg1}}"
|
||||
webscan_rule_match_error:
|
||||
other: "规则匹配错误 [{{.Arg1}}]: {{.Arg2}}"
|
||||
webscan_poc_exec_error:
|
||||
other: "执行POC错误 {{.Arg1}}: {{.Arg2}}"
|
||||
webscan_set_exec_error:
|
||||
other: "设置项执行错误 {{.Arg1}}: {{.Arg2}}"
|
||||
webscan_regex_compile_error:
|
||||
other: "正则编译错误: {{.Arg1}}"
|
||||
webscan_reverse_url_error:
|
||||
other: "反连URL解析错误: {{.Arg1}}"
|
||||
webscan_cel_syntax_error:
|
||||
other: "CEL语法错误 [{{.Arg1}}]: {{.Arg2}}"
|
||||
webscan_cel_init_failed:
|
||||
other: "初始化基础CEL环境失败: {{.Arg1}}"
|
||||
webscan_request_restricted:
|
||||
other: "POC HTTP请求 {{.Arg1}} 受限: {{.Arg2}}"
|
||||
webscan_response_parse_failed:
|
||||
other: "响应解析失败: {{.Arg1}}"
|
||||
|
||||
# Main 入口
|
||||
param_error:
|
||||
other: "参数错误: {{.Arg1}}"
|
||||
error_generic:
|
||||
other: "错误: {{.Arg1}}"
|
||||
init_failed:
|
||||
other: "初始化失败: {{.Arg1}}"
|
||||
poc_load_complete:
|
||||
other: "POC加载完成: 总共{{.Arg1}}个,成功{{.Arg2}}个,失败{{.Arg3}}个"
|
||||
redis_scan_success:
|
||||
other: "Redis {{.Arg1}} {{.Arg2}}"
|
||||
rabbitmq_detected:
|
||||
other: "RabbitMQ {{.Arg1}} {{.Arg2}}"
|
||||
|
||||
# ========================= Web UI消息 =========================
|
||||
web_server_started:
|
||||
other: "Web服务器已启动,端口: {{.Arg1}}"
|
||||
web_shutting_down:
|
||||
other: "Web服务器正在关闭..."
|
||||
web_mode_not_supported:
|
||||
other: "当前版本不支持Web模式,请使用 -tags web 重新编译"
|
||||
Reference in New Issue
Block a user