mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-24 04:01:52 +08:00
## 架构重构
- 全局变量消除,迁移至 Config/State 对象
- SMB 插件融合(smb/smb2/smbghost/smbinfo)
- 服务探测重构,实现 Nmap 风格 fallback 机制
- 输出系统重构,TXT 实时刷盘 + 双写机制
- i18n 框架升级至 go-i18n
## 性能优化
- 正则表达式预编译
- 内存优化 map[string]struct{}
- 并发指纹匹配
- SOCKS5 连接复用
- 滑动窗口调度 + 自适应线程池
## 新功能
- Web 管理界面
- 多格式 POC 适配(xray/afrog)
- 增强指纹库(3139条)
- Favicon hash 指纹识别
- 插件选择性编译(Build Tags)
- fscan-lab 靶场环境
- 默认端口扩展(62→133)
## 构建系统
- 添加 no_local tag 支持排除本地插件
- 多版本构建:fscan/fscan-nolocal/fscan-web
- CI 添加 snapshot 模式支持仅测试构建
## Bug 修复
- 修复 120+ 个问题,包括 RDP panic、批量扫描漏报、
JSON 输出格式、Redis 检测、Context 超时等
## 测试增强
- 单元测试覆盖率 74-100%
- 并发安全测试
- 集成测试(Web/端口/服务/SSH/ICMP)
157 lines
4.0 KiB
Go
157 lines
4.0 KiB
Go
package client
|
|
|
|
import (
|
|
"fmt"
|
|
"net"
|
|
"strings"
|
|
"time"
|
|
|
|
"github.com/shadow1ng/fscan/mylib/grdp/core"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/plugin"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/nla"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/pdu"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/sec"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/t125"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/tpkt"
|
|
"github.com/shadow1ng/fscan/mylib/grdp/protocol/x224"
|
|
)
|
|
|
|
type RdpClient struct {
|
|
tpkt *tpkt.TPKT
|
|
x224 *x224.X224
|
|
mcs *t125.MCSClient
|
|
sec *sec.Client
|
|
pdu *pdu.Client
|
|
channels *plugin.Channels
|
|
}
|
|
|
|
func newRdpClient(s *Setting) *RdpClient {
|
|
return &RdpClient{}
|
|
}
|
|
|
|
func bitmapDecompress(bitmap *pdu.BitmapData) []byte {
|
|
return core.Decompress(bitmap.BitmapDataStream, int(bitmap.Width), int(bitmap.Height), Bpp(bitmap.BitsPerPixel))
|
|
}
|
|
func split(user string) (domain string, uname string) {
|
|
if strings.Index(user, "\\") != -1 {
|
|
t := strings.Split(user, "\\")
|
|
domain = t[0]
|
|
uname = t[len(t)-1]
|
|
} else if strings.Index(user, "/") != -1 {
|
|
t := strings.Split(user, "/")
|
|
domain = t[0]
|
|
uname = t[len(t)-1]
|
|
} else {
|
|
uname = user
|
|
}
|
|
return
|
|
}
|
|
func (c *RdpClient) Login(host, user, pwd string, width, height int) error {
|
|
conn, err := net.DialTimeout("tcp", host, 3*time.Second)
|
|
if err != nil {
|
|
return fmt.Errorf("[dial err] %v", err)
|
|
}
|
|
|
|
domain, user := split(user)
|
|
c.tpkt = tpkt.New(core.NewSocketLayer(conn), nla.NewNTLMv2(domain, user, pwd))
|
|
c.x224 = x224.New(c.tpkt)
|
|
c.mcs = t125.NewMCSClient(c.x224)
|
|
c.sec = sec.NewClient(c.mcs)
|
|
c.pdu = pdu.NewClient(c.sec)
|
|
c.channels = plugin.NewChannels(c.sec)
|
|
|
|
//c.mcs.SetClientDesktop(uint16(width), uint16(height))
|
|
|
|
c.sec.SetUser(user)
|
|
c.sec.SetPwd(pwd)
|
|
c.sec.SetDomain(domain)
|
|
|
|
c.tpkt.SetFastPathListener(c.sec)
|
|
c.sec.SetFastPathListener(c.pdu)
|
|
c.sec.SetChannelSender(c.mcs)
|
|
c.channels.SetChannelSender(c.sec)
|
|
|
|
//c.x224.SetRequestedProtocol(x224.PROTOCOL_RDP)
|
|
//c.x224.SetRequestedProtocol(x224.PROTOCOL_SSL)
|
|
|
|
err = c.x224.Connect()
|
|
if err != nil {
|
|
return fmt.Errorf("[x224 connect err] %v", err)
|
|
}
|
|
return nil
|
|
}
|
|
func (c *RdpClient) On(event string, f interface{}) {
|
|
c.pdu.On(event, f)
|
|
}
|
|
func (c *RdpClient) KeyUp(sc int, name string) {
|
|
p := &pdu.ScancodeKeyEvent{}
|
|
p.KeyCode = uint16(sc)
|
|
p.KeyboardFlags |= pdu.KBDFLAGS_RELEASE
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_SCANCODE, []pdu.InputEventsInterface{p})
|
|
}
|
|
func (c *RdpClient) KeyDown(sc int, name string) {
|
|
p := &pdu.ScancodeKeyEvent{}
|
|
p.KeyCode = uint16(sc)
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_SCANCODE, []pdu.InputEventsInterface{p})
|
|
}
|
|
|
|
func (c *RdpClient) MouseMove(x, y int) {
|
|
p := &pdu.PointerEvent{}
|
|
p.PointerFlags |= pdu.PTRFLAGS_MOVE
|
|
p.XPos = uint16(x)
|
|
p.YPos = uint16(y)
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_MOUSE, []pdu.InputEventsInterface{p})
|
|
}
|
|
|
|
func (c *RdpClient) MouseWheel(scroll, x, y int) {
|
|
p := &pdu.PointerEvent{}
|
|
p.PointerFlags |= pdu.PTRFLAGS_WHEEL
|
|
p.XPos = uint16(x)
|
|
p.YPos = uint16(y)
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_SCANCODE, []pdu.InputEventsInterface{p})
|
|
}
|
|
|
|
func (c *RdpClient) MouseUp(button int, x, y int) {
|
|
p := &pdu.PointerEvent{}
|
|
|
|
switch button {
|
|
case 0:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON1
|
|
case 2:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON2
|
|
case 1:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON3
|
|
default:
|
|
p.PointerFlags |= pdu.PTRFLAGS_MOVE
|
|
}
|
|
|
|
p.XPos = uint16(x)
|
|
p.YPos = uint16(y)
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_MOUSE, []pdu.InputEventsInterface{p})
|
|
}
|
|
func (c *RdpClient) MouseDown(button int, x, y int) {
|
|
p := &pdu.PointerEvent{}
|
|
|
|
p.PointerFlags |= pdu.PTRFLAGS_DOWN
|
|
|
|
switch button {
|
|
case 0:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON1
|
|
case 2:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON2
|
|
case 1:
|
|
p.PointerFlags |= pdu.PTRFLAGS_BUTTON3
|
|
default:
|
|
p.PointerFlags |= pdu.PTRFLAGS_MOVE
|
|
}
|
|
|
|
p.XPos = uint16(x)
|
|
p.YPos = uint16(y)
|
|
c.pdu.SendInputEvents(pdu.INPUT_EVENT_MOUSE, []pdu.InputEventsInterface{p})
|
|
}
|
|
func (c *RdpClient) Close() {
|
|
if c != nil && c.tpkt != nil {
|
|
c.tpkt.Close()
|
|
}
|
|
}
|