mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-23 03:31:53 +08:00
## 架构重构
- 全局变量消除,迁移至 Config/State 对象
- SMB 插件融合(smb/smb2/smbghost/smbinfo)
- 服务探测重构,实现 Nmap 风格 fallback 机制
- 输出系统重构,TXT 实时刷盘 + 双写机制
- i18n 框架升级至 go-i18n
## 性能优化
- 正则表达式预编译
- 内存优化 map[string]struct{}
- 并发指纹匹配
- SOCKS5 连接复用
- 滑动窗口调度 + 自适应线程池
## 新功能
- Web 管理界面
- 多格式 POC 适配(xray/afrog)
- 增强指纹库(3139条)
- Favicon hash 指纹识别
- 插件选择性编译(Build Tags)
- fscan-lab 靶场环境
- 默认端口扩展(62→133)
## 构建系统
- 添加 no_local tag 支持排除本地插件
- 多版本构建:fscan/fscan-nolocal/fscan-web
- CI 添加 snapshot 模式支持仅测试构建
## Bug 修复
- 修复 120+ 个问题,包括 RDP panic、批量扫描漏报、
JSON 输出格式、Redis 检测、Context 超时等
## 测试增强
- 单元测试覆盖率 74-100%
- 并发安全测试
- 集成测试(Web/端口/服务/SSH/ICMP)
216 lines
4.3 KiB
Go
216 lines
4.3 KiB
Go
//go:build web
|
|
|
|
package ws
|
|
|
|
import (
|
|
"encoding/json"
|
|
"net/http"
|
|
"sync"
|
|
"time"
|
|
|
|
"github.com/gorilla/websocket"
|
|
)
|
|
|
|
var upgrader = websocket.Upgrader{
|
|
ReadBufferSize: 1024,
|
|
WriteBufferSize: 1024,
|
|
CheckOrigin: func(r *http.Request) bool {
|
|
return true // 允许所有来源(本地工具)
|
|
},
|
|
}
|
|
|
|
// MessageType WebSocket消息类型
|
|
type MessageType string
|
|
|
|
const (
|
|
// 扫描相关
|
|
MsgScanStarted MessageType = "scan_started"
|
|
MsgScanProgress MessageType = "scan_progress"
|
|
MsgScanResult MessageType = "scan_result"
|
|
MsgScanCompleted MessageType = "scan_completed"
|
|
MsgScanError MessageType = "scan_error"
|
|
|
|
// 系统相关
|
|
MsgConnected MessageType = "connected"
|
|
MsgPing MessageType = "ping"
|
|
MsgPong MessageType = "pong"
|
|
)
|
|
|
|
// Message WebSocket消息结构
|
|
type Message struct {
|
|
Type MessageType `json:"type"`
|
|
Timestamp int64 `json:"timestamp"`
|
|
Data interface{} `json:"data,omitempty"`
|
|
}
|
|
|
|
// Client WebSocket客户端
|
|
type Client struct {
|
|
hub *Hub
|
|
conn *websocket.Conn
|
|
send chan []byte
|
|
}
|
|
|
|
// Hub 管理所有WebSocket连接
|
|
type Hub struct {
|
|
clients map[*Client]bool
|
|
broadcast chan []byte
|
|
register chan *Client
|
|
unregister chan *Client
|
|
mu sync.RWMutex
|
|
}
|
|
|
|
// NewHub 创建Hub实例
|
|
func NewHub() *Hub {
|
|
return &Hub{
|
|
clients: make(map[*Client]bool),
|
|
broadcast: make(chan []byte, 256),
|
|
register: make(chan *Client),
|
|
unregister: make(chan *Client),
|
|
}
|
|
}
|
|
|
|
// Run 启动Hub
|
|
func (h *Hub) Run() {
|
|
for {
|
|
select {
|
|
case client := <-h.register:
|
|
h.mu.Lock()
|
|
h.clients[client] = true
|
|
h.mu.Unlock()
|
|
|
|
// 发送连接成功消息
|
|
msg := Message{
|
|
Type: MsgConnected,
|
|
Timestamp: time.Now().UnixMilli(),
|
|
Data: map[string]string{"status": "connected"},
|
|
}
|
|
if data, err := json.Marshal(msg); err == nil {
|
|
client.send <- data
|
|
}
|
|
|
|
case client := <-h.unregister:
|
|
h.mu.Lock()
|
|
if _, ok := h.clients[client]; ok {
|
|
delete(h.clients, client)
|
|
close(client.send)
|
|
}
|
|
h.mu.Unlock()
|
|
|
|
case message := <-h.broadcast:
|
|
h.mu.RLock()
|
|
for client := range h.clients {
|
|
select {
|
|
case client.send <- message:
|
|
default:
|
|
close(client.send)
|
|
delete(h.clients, client)
|
|
}
|
|
}
|
|
h.mu.RUnlock()
|
|
}
|
|
}
|
|
}
|
|
|
|
// Broadcast 广播消息给所有客户端
|
|
func (h *Hub) Broadcast(msgType MessageType, data interface{}) {
|
|
msg := Message{
|
|
Type: msgType,
|
|
Timestamp: time.Now().UnixMilli(),
|
|
Data: data,
|
|
}
|
|
if jsonData, err := json.Marshal(msg); err == nil {
|
|
h.broadcast <- jsonData
|
|
}
|
|
}
|
|
|
|
// ClientCount 返回当前连接的客户端数量
|
|
func (h *Hub) ClientCount() int {
|
|
h.mu.RLock()
|
|
defer h.mu.RUnlock()
|
|
return len(h.clients)
|
|
}
|
|
|
|
// ServeWs 处理WebSocket连接
|
|
func ServeWs(hub *Hub, w http.ResponseWriter, r *http.Request) {
|
|
conn, err := upgrader.Upgrade(w, r, nil)
|
|
if err != nil {
|
|
return
|
|
}
|
|
|
|
client := &Client{
|
|
hub: hub,
|
|
conn: conn,
|
|
send: make(chan []byte, 256),
|
|
}
|
|
hub.register <- client
|
|
|
|
go client.writePump()
|
|
go client.readPump()
|
|
}
|
|
|
|
// readPump 读取客户端消息
|
|
func (c *Client) readPump() {
|
|
defer func() {
|
|
c.hub.unregister <- c
|
|
c.conn.Close()
|
|
}()
|
|
|
|
c.conn.SetReadLimit(512 * 1024) // 512KB
|
|
c.conn.SetReadDeadline(time.Now().Add(60 * time.Second))
|
|
c.conn.SetPongHandler(func(string) error {
|
|
c.conn.SetReadDeadline(time.Now().Add(60 * time.Second))
|
|
return nil
|
|
})
|
|
|
|
for {
|
|
_, message, err := c.conn.ReadMessage()
|
|
if err != nil {
|
|
break
|
|
}
|
|
|
|
// 处理ping消息
|
|
var msg Message
|
|
if json.Unmarshal(message, &msg) == nil {
|
|
if msg.Type == MsgPing {
|
|
pong := Message{
|
|
Type: MsgPong,
|
|
Timestamp: time.Now().UnixMilli(),
|
|
}
|
|
if data, err := json.Marshal(pong); err == nil {
|
|
c.send <- data
|
|
}
|
|
}
|
|
}
|
|
}
|
|
}
|
|
|
|
// writePump 发送消息给客户端
|
|
func (c *Client) writePump() {
|
|
ticker := time.NewTicker(30 * time.Second)
|
|
defer func() {
|
|
ticker.Stop()
|
|
c.conn.Close()
|
|
}()
|
|
|
|
for {
|
|
select {
|
|
case message, ok := <-c.send:
|
|
c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
|
|
if !ok {
|
|
c.conn.WriteMessage(websocket.CloseMessage, []byte{})
|
|
return
|
|
}
|
|
|
|
if err := c.conn.WriteMessage(websocket.TextMessage, message); err != nil {
|
|
return
|
|
}
|
|
|
|
case <-ticker.C:
|
|
c.conn.SetWriteDeadline(time.Now().Add(10 * time.Second))
|
|
if err := c.conn.WriteMessage(websocket.PingMessage, nil); err != nil {
|
|
return
|
|
}
|
|
}
|
|
}
|
|
}
|