archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-22 03:10:42 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity
752 Commits 3 Branches 30 Tags
3babff68635eeb744220a6e7d1e62d2ab3b643a4
Commit Graph
100 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
ZacharyZcR 8402be98e3 优化自适应扫描系统 & 修复 POC 调度问题 
自适应扫描优化:
- target/ceiling 分离，自适应池可向上探索而非锁死在 target
- assessHealth 阈值按网络环境区分（LAN 收紧 / Internet 放宽）
- RTT 漂移时动态压低 target，配合 AIMD 双重降速
- 去掉 semaphore 双层流控，由 ants pool 统一反压
- 探测端口从 3 个扩充到 8 个，减少 RTT 采样偏差
- computeRetries 按环境调整目标概率和上限

Bug 修复:
- AdaptivePool.Wait() 加 10 分钟超时，防止 goroutine 卡死时永久挂起
- CEL 环境初始化失败后允许重试（sync.Once → sync.Mutex + 标志位）
- CAS 自旋加 runtime.Gosched() 退避，减少高并发下 CPU 空转
- -full 模式下 web 插件跳过 IsMarkedWebService 检查 #588
- 不确定服务补做 HTTP 回退探测，覆盖自定义框架漏网场景
- POC sets 纯字面量值跳过 CEL 编译，消除大量误报错误日志
 2026-06-14 22:23:48 +08:00
ZacharyZcR ade9cd1bff 修复默认扫描 POC 结果缺失 #586 2026-06-14 22:23:44 +08:00
ZacharyZcR 6d91b544de 显示 Web 服务识别 URL 2026-06-14 22:23:44 +08:00
ZacharyZcR 08a87b3128 ci: 完善发版流程
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details 
- release workflow 自动读取 .github/release-notes/<tag>.md 覆盖 body
- 移除手动 prerelease input（goreleaser auto 模式根据 tag 后缀判断）
- 新增 RELEASE.md 发版流程文档
 2026-06-01 08:42:17 +08:00
ZacharyZcR cc1af631f0 fix: CI 测试排除路径 mylib → libs 2026-06-01 08:40:14 +08:00
ZacharyZcR 5078fbc975 fix: 更新 lint 排除路径 mylib → libs 2026-06-01 08:39:49 +08:00
ZacharyZcR 354ad2e24b chore: 移除 fscan-lite (C 版本) 
功能过于单一（仅 TCP 端口扫描），与 fscan 品牌定位不符。
fscan-nolocal 已是精简版的正确方案。

- 删除 fscan-lite 源码和构建脚本
- goreleaser 移除 lite 构建步骤
- CI 不再安装 mingw 交叉编译工具
 2026-06-01 08:37:04 +08:00
ZacharyZcR 942f0fa6c3 fix: web API 版本号改为动态获取，不再硬编码 2026-06-01 08:34:42 +08:00
ZacharyZcR 37b77f9c86 docs: 添加 v2.2.0-rc Release Notes 草稿 
用于发版时 gh release create --notes-file 引用。
 2026-06-01 08:28:59 +08:00
ZacharyZcR a02eed0518 refactor: mylib 重命名为 libs 
更清晰的目录命名，libs/ 存放内嵌的独立协议实现库。
 2026-06-01 08:22:13 +08:00
ZacharyZcR 019d13c9d4 chore: 版本号更新为 2.2.0-rc 
- README/README_EN 版本标记更新
- globals.go version 常量更新
- 移除 Issue 模板中不可用的安全报告链接
 2026-06-01 08:20:01 +08:00
ZacharyZcR c43982f834 chore: 更新 Issue 模板 
- 版本号更新至 2.2.0-rc / 2.1.3 / 2.1.2
- 移除 placeholder 预填充内容，避免用户不删不改直接提交
- 新增 SDK、代理、mips 等选项
- macOS/Ubuntu 版本更新
- 新增安全漏洞报告入口指引
- 模板顶部增加"未填写有效信息会被关闭"提示
 2026-06-01 08:17:00 +08:00
ZacharyZcR d6d323854a refactor: 完成全局状态到 session 的完整迁移 
将 plugins/services、plugins/local、plugins/web、webscan 层的日志输出、
漏洞结果保存和 TCP 计数器从全局 common.Log*/GetGlobalState() 迁移到
session 实例方法，确保 SDK 并发扫描时各实例完全隔离。

- 50 个文件，所有插件日志走 session.Log*
- DoRequest 加入 session 参数，计数器走 session.State
- POC 执行器通过 POCContext.Session 传递
- 仅保留 init() 和 CEL runtime 等无 session 场景的全局回退
 2026-06-01 08:13:23 +08:00
ZacharyZcR 40b0eee654 Remove SimpleMaxHosts limit to fix large CIDR scanning
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details 
Closes #583
 2026-05-27 16:16:42 +08:00
ZacharyZcR 8d30ee334c Add native protocol service plugins
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details
2026-05-23 15:51:50 +08:00
ZacharyZcR 73cbe803c4 Expand i18n coverage 2026-05-23 15:18:40 +08:00
ZacharyZcR 9ed6cc95b6 replace string builder sprintf with fprintf
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details
2026-05-23 07:53:28 +08:00
ZacharyZcR a0f0379c6c silence ci warnings and staticcheck suggestions 2026-05-23 07:50:49 +08:00
ZacharyZcR 3c7823355d tighten scan session and HTTP paths 2026-05-23 07:46:53 +08:00
ZacharyZcR 1a714f6a0c reduce scanner client fingerprints 2026-05-23 07:20:24 +08:00
ZacharyZcR 0046817c2e fix mssql login client metadata 2026-05-23 07:17:55 +08:00
ZacharyZcR e0080555b4 fix: 跳过snmp社区字符串暴力破解中的冗余public探测
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details
2026-05-19 21:00:47 +08:00
ZacharyZcR bc2a8f653a fix: 修复新服务扫描插件的健壮性问题 
- ipmi: 删除未使用的 encoding/binary 导入
- rmi: TCP读取改用 io.ReadFull 避免分片导致的解析错误
- jdwp: handshake响应读取改用 io.ReadFull 避免分片误判
- nfs: v4协议回退时使用新连接避免残留数据污染
- snmp: 修正timeout计算与其他插件保持一致
 2026-05-19 20:46:22 +08:00
ZacharyZcR bfd64f78ed 瘦身: Kafka/MongoDB/Cassandra用raw TCP替代重型依赖
测试构建 / 代码检查 (push) Has been cancelled
Details
测试构建 / 单元测试和构建 (push) Has been cancelled
Details
测试构建 / 构建验证 (push) Has been cancelled
Details 
- kafka: 移除IBM/sarama(45MB), 自实现SASL PLAIN+ApiVersions协议(~150行)
- mongodb: 移除mongo-driver(25MB), 自实现OP_MSG+saslStart认证(~180行)
- cassandra: 移除gocql(1.2MB), 自实现CQLv4 STARTUP+SASL PLAIN(~130行)
- 同时移除间接依赖: pierrec/lz4, klauspost/compress, eapache/snappy等

二进制: 47MB → 40MB (-15%), 移除~55MB压缩依赖
全部13个测试包通过
 2026-05-18 06:37:05 +08:00
ZacharyZcR 7063027acf 性能优化: 热路径零分配, 自适应池CAS无锁化, 锁外计算 
- port_scan: fmt.Sprintf→JoinHostPort+fmtPort零分配地址格式化 (2.5x)
- port_scan: strings.ToLower→containsFold零分配大小写不敏感匹配 (2.5x)
- port_scan: slidingWindowSchedule修复semaphore泄漏bug
- service_probe: readFromConn预分配4KB缓冲区消除扩容
- adaptive_pool: maybeAdjust用atomic CAS代替持锁检查, 99%免锁
- adaptive_timeout: Timeout锁外计算均值/标准差, 只锁缓存更新
- 新增perf_bench_test.go基准测试验证所有优化
 2026-05-18 06:11:10 +08:00
ZacharyZcR 639298b7c8 修复全部SA1006: fmt.Errorf(i18n)统一使用"%s"前缀 2026-05-18 05:17:40 +08:00
ZacharyZcR f427f04d35 修复SA1006: fmt.Errorf(i18n.Tr)改用fmt.Errorf("%s", ...) 2026-05-18 05:08:34 +08:00
ZacharyZcR 05e383d8bf 修复lint: errcheck返回值检查, SA1006动态格式化字符串 
- scanner_core: 3处InitializeGlobalVScan()返回值用_显式丢弃
- flag/initialize/network: fmt.Errorf(i18n.Tr(...))改为fmt.Errorf("%s", i18n.Tr(...))
 2026-05-18 05:07:02 +08:00
ZacharyZcR a560531e70 修复CI: 覆盖率门禁改用awk整数比较, lint过滤简化 
- 覆盖率检查移除bc依赖，改用awk int()整数比较
- lint过滤用单条grep -vE替代管道链，更健壮
- 测试命令预计算包列表避免子shell问题
 2026-05-18 04:57:39 +08:00
ZacharyZcR 77827bef66 修复凭证测试器计数器、消除panic、补齐i18n 
- credential_tester: testCredentialWithRetry返回ErrorType，修复网络错误计数器永久不递增的bug
- scanner: os.Exit(1)改为return，defer Cleanup可正常执行
- probe_parser: 5处panic改为error返回，调用链透传到init()
- common库: parsers/initialize/network/session共17处硬编码中文改用i18n
- services插件: 18个文件115处硬编码中文改用i18n
- locale: 补齐service/parser/network相关~25个中英文键
 2026-05-18 04:55:20 +08:00
ZacharyZcR c266912dcb 修复10个代码缺陷: panic防护, 死锁, 密钥泄漏, 错误吞没 
- eval_random: randomInt参数max<=min时不再panic，返回CEL错误
- scanner: 长驻插件nil/panic时兜底发送ready通道，消除死锁
- poc_executor: Ceye API密钥改为环境变量CEYE_API/CEYE_DOMAIN
- Eval: ParseResponse加入oResp.Request nil检查
- Eval: reverseCheck中http.NewRequest错误不再忽略
- poc_executor: clusterpoc中CEL表达式求值错误记录日志
- winwmi: PowerShell执行失败完整记录错误信息
- sshkey: authorized_keys读取失败处理错误
- minidump: Scan结束后释放系统DLL句柄
- Windows插件: PE文件错误消息改用i18n
 2026-05-18 03:47:42 +08:00
ZacharyZcR 2f2b30763c 修复硬编码中文，迁移废弃的 uuid 依赖 
- flag.go: -local/-perf 参数改用 i18n.GetText，checkParameterConflicts 改用 i18n.Tr
- 补齐中英文 locale 中 flag_local_plugin/flag_perf_stats/param_local_multi_plugin
- satori/go.uuid 迁移为 google/uuid (satori 已废弃)
- CI 补充 lint Go 版本说明
 2026-05-18 02:43:45 +08:00
ZacharyZcR dd8e327a56 docs: 测试新的构建 2025-07-17 18:15:50 +08:00
ZacharyZcR ad5798d02e docs: 测试新的构建 2025-07-17 18:12:28 +08:00
ZacharyZcR 3c8511e91f docs: 测试新的构建 2025-07-17 18:09:18 +08:00
ZacharyZcR d5e2c15333 docs: 测试新的构建 2025-07-17 18:00:25 +08:00
ZacharyZcR 9967b34fff 触发工作流测试 2025-07-17 17:59:10 +08:00
ZacharyZcR 487681b353 docs: 测试新的构建 2025-07-17 17:53:18 +08:00
ZacharyZcR b1e67fd7b1 docs: 测试新的构建 2025-07-17 17:48:11 +08:00
ZacharyZcR 25dc6102ed perf: 默认线程改为600 2025-05-10 16:56:41 +08:00
ZacharyZcR 0dc4a6c360 perf: 日常优化 2025-05-05 04:00:35 +08:00
ZacharyZcR 2b4a4024b8 perf: 删除无用函数 2025-05-05 02:24:37 +08:00
ZacharyZcR e58a48ba9b fix: 修复扫描逻辑 2025-04-26 06:18:01 +08:00
ZacharyZcR a8bd8ca508 docs: 移除说明，版本号增加 2025-04-26 04:25:22 +08:00
ZacharyZcR 247459a7f7 fix: 细节修复 2025-04-26 04:16:31 +08:00
ZacharyZcR a1452eb635 fix: 参数修正 2025-04-20 19:30:23 +08:00
ZacharyZcR be3affcedd docs: 重写README 2025-04-15 18:19:25 +08:00
ZacharyZcR 77705118d5 refactor: 大量重构 2025-04-14 02:36:16 +08:00
ZacharyZcR a2c56ab106 fix: 大型修复，增加超时和线程控制 2025-04-13 19:17:49 +08:00
ZacharyZcR b89e892f14 fix: #457 2025-04-13 19:15:16 +08:00
ZacharyZcR f79b12a23c fix: #439 2025-04-13 15:46:37 +08:00
ZacharyZcR b8cc8ab5dc fix: #460 2025-04-13 15:08:34 +08:00
ZacharyZcR b73996884f fix: SSH优化和修复 2025-04-13 13:07:28 +08:00
ZacharyZcR c58b63a6ac fix: 修复#444 2025-04-05 22:00:21 +08:00
ZacharyZcR e4e3ff1763 fix: 修复#439 2025-04-05 21:55:57 +08:00
ZacharyZcR e962b9171b fix: 修复#443 2025-04-05 21:43:41 +08:00
ZacharyZcR 2c4e1d9c28 fix: 降低版本 2025-04-05 17:46:53 +08:00
ZacharyZcR e688b42efe fix: 修复#435 2025-04-05 17:44:52 +08:00
ZacharyZcR 1e42d41a1c fix: 修复#435 2025-04-05 17:42:13 +08:00
ZacharyZcR 87ceba4d8f fix: 修复#431 2025-04-05 17:24:09 +08:00
ZacharyZcR 4aaa05f6a4 fix: 暂时去除mips相关 2025-02-14 20:45:44 +08:00
ZacharyZcR 150d62824c doc: 更新README.md 2025-02-14 20:16:41 +08:00
ZacharyZcR c3219848ef merge: 解决问题 2025-02-14 19:56:12 +08:00
ZacharyZcR 7312da8af8 merge: 解决问题 2025-02-14 19:34:45 +08:00
ZacharyZcR 3beb6b42b2 Merge branch 'main' of https://github.com/shadow1ng/fscan into dev 
# Conflicts:
#	common/ParseIP.go   resolved by dev version
 2025-02-14 19:33:50 +08:00
ZacharyZcR 18aae783c6 fix: Web扫描的Bug 2025-02-14 18:50:19 +08:00
ZacharyZcR 46e0472ec1 feat: i18n 2025-02-07 13:10:38 +08:00
ZacharyZcR 3dde342d65 feat: i18n 2025-02-07 13:10:06 +08:00
ZacharyZcR eb8cda3b7f perf: 优化注释 2025-02-07 12:08:14 +08:00
ZacharyZcR bcb326dbef perf: 优化本地扫描 2025-02-07 12:08:06 +08:00
ZacharyZcR 102d100c25 perf: 优化代码结构 2025-02-07 11:39:04 +08:00
ZacharyZcR c94ec76292 fix: 降级go版本适应环境 2025-01-15 15:49:22 +08:00
ZacharyZcR 65b94465fe Merge branch 'dev' of https://github.com/shadow1ng/fscan into dev 2025-01-15 15:17:22 +08:00
ZacharyZcR cdbc0e02f3 refactor: 修改日志显示等级 2025-01-15 15:14:15 +08:00
ZacharyZcR f20aadb745 refactor: 默认不开启进度条 2025-01-15 15:10:01 +08:00
ZacharyZcR 97e9ac7161 feat: 分离结果输出和日志 2025-01-14 23:38:58 +08:00
ZacharyZcR c6c613a17b fix: 去掉不完善的SYN扫描 2025-01-14 13:06:24 +08:00
ZacharyZcR a245934cf2 Merge branch 'dev' of https://github.com/shadow1ng/fscan into dev 2025-01-12 22:26:43 +08:00
ZacharyZcR 0235bf5af5 fix: -hf的一个问题 修复#412的问题 2025-01-12 22:26:18 +08:00
ZacharyZcR e2c8dd8b1f Merge pull request #412 from BaiMeow/patch-1 
Fix 192.168 should mask 16
 2025-01-12 21:31:30 +08:00
ZacharyZcR e624c3092f Merge pull request #413 from adeljck/dev 
更新了漏洞扫描时,详细信息输出错误的问题
 2025-01-12 21:29:46 +08:00
ZacharyZcR 86b6faec79 fix: 修复一些逻辑问题 2025-01-09 23:32:50 +08:00
ZacharyZcR 235e2aee60 refactor: 调整逻辑，修复SMB2的一个跳出问题 2025-01-04 17:00:03 +08:00
ZacharyZcR af06345aa5 refactor: 调整扫描逻辑 2025-01-04 14:04:41 +08:00
ZacharyZcR 75aeee5215 feat: 优化域探测显示，调整Web扫描逻辑 2025-01-04 11:49:59 +08:00
ZacharyZcR a42ee523b0 feat: 增加端口识别，修复插件总超时 2025-01-03 16:29:54 +08:00
ZacharyZcR a603e13d3b perf: 优化进度条 2025-01-01 08:27:13 +08:00
ZacharyZcR ceede3cd68 refactor: 输出格式重构，去掉所有插件的多线程，因为多线程会导致结果不准确，加入进度条 2025-01-01 07:18:36 +08:00
ZacharyZcR 277ea5d332 refactor: 输出格式重构，重构SMB、SMB2、FTP的一些验证逻辑 2025-01-01 05:24:49 +08:00
ZacharyZcR d13e1952e9 fix: 修复了RDP的一个死锁问题 2025-01-01 00:50:36 +08:00
ZacharyZcR df4d39fb1f fix: 修复了SMB的一个已知问题 2025-01-01 00:39:39 +08:00
ZacharyZcR e93b6fc613 fix: 修复了RPC的一个已知问题 2025-01-01 00:04:53 +08:00
ZacharyZcR 42482228da fix: 修复了FTP的一个已知问题 2024-12-31 20:42:08 +08:00
ZacharyZcR c004762a8c refactor: 全部优化为多线程 2024-12-31 20:25:54 +08:00
ZacharyZcR ed69e41001 refactor: 对Redis环境做了优化，输出优化 2024-12-31 19:41:21 +08:00
ZacharyZcR 5e06a0b2b7 Merge branch 'dev' of https://github.com/shadow1ng/fscan into dev 2024-12-28 06:39:16 +08:00
ZacharyZcR 2ce7041c95 refactor: 去掉UDP扫描、优化了DCInfo和MiniDump的检测机制 2024-12-28 06:38:44 +08:00
ZacharyZcR 0954492540 refactor: 增加约束编译 2024-12-28 06:34:37 +08:00
ZacharyZcR ee1d176a8f refactor: 重构WMIExec模块 2024-12-28 06:02:01 +08:00
ZacharyZcR ef70395d7d feat: 增加MiniDump插件 2024-12-28 05:43:38 +08:00