refactor: 全部优化为多线程

Plugins/MySQL.go

@@ -6,6 +6,7 @@ import (
 	_ "github.com/go-sql-driver/mysql"
 	"github.com/shadow1ng/fscan/Common"
 	"strings"
+	"sync"
 	"time"
 )
 
@@ -15,34 +16,138 @@ func MysqlScan(info *Common.HostInfo) (tmperr error) {
 		return
 	}
 
-	starttime := time.Now().Unix()
+	maxRetries := Common.MaxRetries
+	threads := Common.BruteThreads
 
-	// 尝试用户名密码组合
+	// 添加成功标志通道
+	successChan := make(chan struct{}, 1)
+	defer close(successChan)
+
+	// 创建任务通道
+	taskChan := make(chan struct {
+		user string
+		pass string
+	}, len(Common.Userdict["mysql"])*len(Common.Passwords))
+
+	resultChan := make(chan error, threads)
+
+	// 生成所有用户名密码组合任务
 	for _, user := range Common.Userdict["mysql"] {
 		for _, pass := range Common.Passwords {
-			// 替换密码中的用户名占位符
 			pass = strings.Replace(pass, "{user}", user, -1)
+			taskChan <- struct {
+				user string
+				pass string
+			}{user, pass}
+		}
+	}
+	close(taskChan)
 
-			flag, err := MysqlConn(info, user, pass)
-			if flag && err == nil {
-				return err
+	// 启动工作线程
+	var wg sync.WaitGroup
+	for i := 0; i < threads; i++ {
+		wg.Add(1)
+		go func() {
+			defer wg.Done()
+			starttime := time.Now().Unix()
+
+			for task := range taskChan {
+				// 检查是否已经成功
+				select {
+				case <-successChan:
+					resultChan <- nil
+					return
+				default:
+				}
+
+				// 重试循环
+				for retryCount := 0; retryCount < maxRetries; retryCount++ {
+					// 检查是否超时
+					if time.Now().Unix()-starttime > int64(Common.Timeout) {
+						resultChan <- fmt.Errorf("扫描超时")
+						return
+					}
+
+					// 执行MySQL连接
+					done := make(chan struct {
+						success bool
+						err     error
+					})
+
+					go func(user, pass string) {
+						success, err := MysqlConn(info, user, pass)
+						done <- struct {
+							success bool
+							err     error
+						}{success, err}
+					}(task.user, task.pass)
+
+					// 等待结果或超时
+					var err error
+					select {
+					case result := <-done:
+						err = result.err
+						if result.success && err == nil {
+							// 连接成功
+							select {
+							case successChan <- struct{}{}: // 标记成功
+								successLog := fmt.Sprintf("[+] MySQL %v:%v %v %v",
+									info.Host, info.Ports, task.user, task.pass)
+								Common.LogSuccess(successLog)
+							default:
+							}
+							resultChan <- nil
+							return
+						}
+					case <-time.After(time.Duration(Common.Timeout) * time.Second):
+						err = fmt.Errorf("连接超时")
+					}
+
+					// 处理错误情况
+					if err != nil {
+						errlog := fmt.Sprintf("[-] MySQL %v:%v %v %v %v",
+							info.Host, info.Ports, task.user, task.pass, err)
+						Common.LogError(errlog)
+
+						// 特殊处理认证失败的情况
+						if strings.Contains(err.Error(), "Access denied") {
+							break // 跳出重试循环，继续下一个密码
+						}
+
+						// 检查是否需要重试
+						if retryErr := Common.CheckErrs(err); retryErr != nil {
+							if retryCount == maxRetries-1 {
+								resultChan <- err
+								return
+							}
+							continue // 继续重试
+						}
+						break // 如果不需要重试，跳出重试循环
+					}
+				}
 			}
+			resultChan <- nil
+		}()
+	}
 
-			// 记录错误信息
-			errlog := fmt.Sprintf("[-] MySQL %v:%v %v %v %v", info.Host, info.Ports, user, pass, err)
-			Common.LogError(errlog)
+	// 等待所有线程完成
+	go func() {
+		wg.Wait()
+		close(resultChan)
+	}()
+
+	// 检查结果
+	for err := range resultChan {
+		if err != nil {
 			tmperr = err
-
-			if Common.CheckErrs(err) {
-				return err
-			}
-
-			// 超时检查
-			if time.Now().Unix()-starttime > (int64(len(Common.Userdict["mysql"])*len(Common.Passwords)) * Common.Timeout) {
-				return err
+			if !strings.Contains(err.Error(), "Access denied") {
+				if retryErr := Common.CheckErrs(err); retryErr != nil {
+					return err
+				}
 			}
 		}
 	}
+
 	return tmperr
 }
 
@@ -74,8 +179,6 @@ func MysqlConn(info *Common.HostInfo, user string, pass string) (bool, error) {
 		return false, err
 	}
 
-	// 连接成功
-	result := fmt.Sprintf("[+] MySQL %v:%v:%v %v", host, port, username, password)
-	Common.LogSuccess(result)
+	// 连接成功，只返回结果，不打印日志
 	return true, nil
 }