mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-21 19:00:42 +08:00
NOPTrace
6bb8ccd490
testAnonymousAccess and testOpenRelay dial the target and immediately hand the connection to smtp.NewClient without setting any deadline. smtp.NewClient reads the 220 greeting as its first operation, so a server that accepts TCP but never sends data (honeypot/tarpit) blocks the goroutine forever. The outer select waits on resultChan or ctx.Done(); with the default -gt 0 the context has no deadline, so Scan never returns and RunScan's wg.Wait() freezes the whole process. Set the same ModuleTimeout deadline used by the other functions in this file (doSMTPAuth, testVRFYCommand, testEXPNCommand, getServerInfo). Verified against a live accept-but-silent SMTP endpoint: - unpatched: process hangs (31 goroutines, stack at smtp.go:276) - patched: full plugin chain completes in ~92s, no regression on normally-responding servers (detection output identical)
服务扫描插件目录
本目录包含所有服务扫描插件，采用简化的单文件插件架构。
已实现插件
数据库服务
mysql.go- MySQL数据库扫描postgresql.go- PostgreSQL数据库扫描redis.go- Redis内存数据库扫描mongodb.go- MongoDB文档数据库扫描mssql.go- Microsoft SQL Server扫描oracle.go- Oracle数据库扫描memcached.go- Memcached缓存扫描neo4j.go- Neo4j图数据库扫描
消息队列服务
rabbitmq.go- RabbitMQ消息队列扫描activemq.go- ActiveMQ消息队列扫描kafka.go- Apache Kafka扫描
网络服务
ssh.go- SSH远程登录服务扫描ftp.go- FTP文件传输服务扫描telnet.go- Telnet远程终端服务扫描smtp.go- SMTP邮件服务扫描snmp.go- SNMP网络管理协议扫描ldap.go- LDAP目录服务扫描rsync.go- Rsync文件同步服务扫描
Windows服务
findnet.go- Windows网络发现插件 (RPC端点映射)smbinfo.go- SMB协议信息收集插件
其他服务
vnc.go- VNC远程桌面服务扫描cassandra.go- Apache Cassandra数据库扫描
插件特性
每个插件都包含：
- ✅ 服务识别功能
- ✅ 弱密码检测功能
- ✅ 完整的利用功能
- ✅ 错误处理和超时控制
- ✅ 统一的结果输出格式
开发规范
所有插件都遵循 ../README.md 中定义的开发规范。