修复10个代码缺陷: panic防护, 死锁, 密钥泄漏, 错误吞没

- eval_random: randomInt参数max<=min时不再panic,返回CEL错误
- scanner: 长驻插件nil/panic时兜底发送ready通道,消除死锁
- poc_executor: Ceye API密钥改为环境变量CEYE_API/CEYE_DOMAIN
- Eval: ParseResponse加入oResp.Request nil检查
- Eval: reverseCheck中http.NewRequest错误不再忽略
- poc_executor: clusterpoc中CEL表达式求值错误记录日志
- winwmi: PowerShell执行失败完整记录错误信息
- sshkey: authorized_keys读取失败处理错误
- minidump: Scan结束后释放系统DLL句柄
- Windows插件: PE文件错误消息改用i18n
This commit is contained in:
ZacharyZcR
2026-05-18 03:47:42 +08:00
parent 2f2b30763c
commit c266912dcb
16 changed files with 88 additions and 31 deletions
+8
View File
@@ -756,6 +756,14 @@ minidump_panic:
minidump_success:
other: "Successfully dumped lsass.exe memory to file: {{.Arg1}} (size: {{.Arg2}} bytes)"
# Local plugin common errors
local_pe_not_specified:
other: "No PE file specified, use -win-pe parameter"
local_pe_not_found:
other: "PE file not found: {{.Arg1}}"
local_invalid_pe:
other: "Invalid PE file: {{.Arg1}}"
# ========================= WebScan Messages =========================
webscan_target_url_failed:
other: "Failed to build target URL: {{.Arg1}}"
+8
View File
@@ -753,6 +753,14 @@ minidump_panic:
minidump_success:
other: "成功将lsass.exe内存转储到文件: {{.Arg1}} (大小: {{.Arg2}} bytes)"
# 本地插件通用错误
local_pe_not_specified:
other: "未指定PE文件,使用 -win-pe 参数"
local_pe_not_found:
other: "PE文件不存在: {{.Arg1}}"
local_invalid_pe:
other: "无效的PE文件: {{.Arg1}}"
# ========================= WebScan消息 =========================
webscan_target_url_failed:
other: "构建目标URL失败: {{.Arg1}}"