已加入yaml解析引擎,支持xray的Poc,默认使用所有Poc(已对xray的poc进行了筛选),可以使用-pocname weblogic,只使用某种或某个poc。需要go版本1.16以上,只能自行编译最新版go来进行测试

Plugins/CVE-2020-0796.go

@@ -1,9 +1,5 @@
 package Plugins
 
-//Ladon Scanner for golang
-//Author: k8gege
-//K8Blog: http://k8gege.org
-//Github: https://github.com/k8gege
 import (
 	"bytes"
 	"fmt"

Plugins/ms17017.go

@@ -3,16 +3,11 @@ package Plugins
 import (
 	"encoding/binary"
 	"encoding/hex"
-	"sync"
-
-	//"flag"
 	"fmt"
+	"github.com/shadow1ng/fscan/common"
 	"net"
 	"strings"
-
-	"github.com/shadow1ng/fscan/common"
-
-	//"sync"
+	"sync"
 	"time"
 )
 
@@ -112,7 +107,7 @@ func MS17010Scan(info *common.HostInfo) {
 		//fmt.Printf("%s\tMS17-010\t(%s)\n", ip, os)
 		//if runtime.GOOS=="windows" {fmt.Printf("%s\tMS17-010\t(%s)\n", ip, os)
 		//} else{fmt.Printf("\033[33m%s\tMS17-010\t(%s)\033[0m\n", ip, os)}
-		result := fmt.Sprintf("%s\tMS17-010\t(%s)", ip, os)
+		result := fmt.Sprintf("[+] %s\tMS17-010\t(%s)", ip, os)
 		common.LogSuccess(result)
 		// detect present of DOUBLEPULSAR SMB implant
 		trans2SessionSetupRequest[28] = treeID[0]

Plugins/mssql.go

@@ -35,7 +35,7 @@ func MssqlConn(info *common.HostInfo, user string, pass string) (flag bool, err
 		defer db.Close()
 		err = db.Ping()
 		if err == nil {
-			result := fmt.Sprintf("mssql:%v:%v:%v %v", Host, Port, Username, Password)
+			result := fmt.Sprintf("[+] mssql:%v:%v:%v %v", Host, Port, Username, Password)
 			common.LogSuccess(result)
 			flag = true
 		}

Plugins/mysql.go

@@ -36,7 +36,7 @@ func MysqlConn(info *common.HostInfo, user string, pass string) (flag bool, err
 		defer db.Close()
 		err = db.Ping()
 		if err == nil {
-			result := fmt.Sprintf("mysql:%v:%v:%v %v", Host, Port, Username, Password)
+			result := fmt.Sprintf("[+] mysql:%v:%v:%v %v", Host, Port, Username, Password)
 			common.LogSuccess(result)
 			flag = true
 		}

Plugins/redis.go

@@ -42,7 +42,7 @@ func RedisConn(info *common.HostInfo, pass string) (flag bool, err error) {
 	conn.Write([]byte(fmt.Sprintf("auth %s\r\n", pass)))
 	reply, err := readreply(conn)
 	if strings.Contains(reply, "+OK") {
-		result := fmt.Sprintf("Redis:%s %s", realhost, pass)
+		result := fmt.Sprintf("[+] Redis:%s %s", realhost, pass)
 		common.LogSuccess(result)
 		flag = true
 		Expoilt(info, realhost, conn)
@@ -62,7 +62,7 @@ func RedisUnauth(info *common.HostInfo) (flag bool, err error) {
 	conn.Write([]byte("info\r\n"))
 	reply, err := readreply(conn)
 	if strings.Contains(reply, "redis_version") {
-		result := fmt.Sprintf("Redis:%s unauthorized", realhost)
+		result := fmt.Sprintf("[+] Redis:%s unauthorized", realhost)
 		common.LogSuccess(result)
 		flag = true
 		Expoilt(info, realhost, conn)

Plugins/ssh.go

@@ -51,7 +51,7 @@ func SshConn(info *common.HostInfo, user string, pass string) (flag bool, err er
 				result := fmt.Sprintf("SSH:%v:%v:%v %v \n %v", Host, Port, Username, Password, string(combo))
 				common.LogSuccess(result)
 			} else {
-				result := fmt.Sprintf("SSH:%v:%v:%v %v", Host, Port, Username, Password)
+				result := fmt.Sprintf("[+] SSH:%v:%v:%v %v", Host, Port, Username, Password)
 				common.LogSuccess(result)
 			}
 		}

Plugins/webtitle.go

@@ -15,13 +15,13 @@ import (
 func WebTitle(info *common.HostInfo, ch chan int, wg *sync.WaitGroup) (err error, result string) {
 	info.Url = fmt.Sprintf("http://%s:%s", info.Host, info.Ports)
 	err, result = geturl(info)
-	if err == nil {
+	if err == nil && info.IsWebCan == false {
 		WebScan.WebScan(info)
 	}
 
 	info.Url = fmt.Sprintf("https://%s:%s", info.Host, info.Ports)
 	err, result = geturl(info)
-	if err == nil {
+	if err == nil && info.IsWebCan == false {
 		WebScan.WebScan(info)
 	}